Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 18/06/2014 Updated: 29/08/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x prior to 9.3-57.5 and 10.0 prior to 10.0-69.4 allows remote malicious users to execute arbitrary code via a long CSEC HTTP response header.

Vulnerable Product	Search on Vulmon	Subscribe to Product
citrix access gateway plug-in 9.0
citrix access gateway plug-in 9.1
citrix access gateway plug-in 10.0
citrix access gateway plug-in 9.2
citrix access gateway plug-in 9.3

CWE-119 http://support.citrix.com/article/CTX134303 http://secunia.com/secunia_research/2012-27 http://osvdb.org/show/osvdb/84433 http://archives.neohapsis.com/archives/bugtraq/2012-08/0009.html https://exchange.xforce.ibmcloud.com/vulnerabilities/77316 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-2592

Vulnerability Summary

References

Vulmon Search

About

Products

Connect