Tracker / CVE-2010-2991
CVE-2010-2991
High 9.3
The IICAClient interface in the ICAClient library in the ICA Client ActiveX Object (aka ICO) component in Citrix Online Plug-in for Windows for XenApp & XenDesktop before 12.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HTML document that triggers the reading of a .ICA file.
Affected products and versions
| citrix | online_plug-in_for_windows_for_xenapp_\&_xendesktop |
|---|---|
| citrix | online_plug-in_for_windows_for_xenapp_\&_xendesktop · … → 12.0 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.