CVE-2004-1078

Опубликовано: 26 апр. 2004

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element.

Ссылки

http://secunia.com/advisories/15108
Patch
Vendor Advisory
http://support.citrix.com/kb/entry.jspa?externalID=CTX105650
Patch
Vendor Advisory
http://www.idefense.com/application/poi/display?id=238&type=vulnerabilities
Patch
Vendor Advisory
http://secunia.com/advisories/15108
Patch
Vendor Advisory
http://support.citrix.com/kb/entry.jspa?externalID=CTX105650
Patch
Vendor Advisory
http://www.idefense.com/application/poi/display?id=238&type=vulnerabilities
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:citrix:metaframe_client:8.0:*:win-ce:*:*:*:*:*

cpe:2.3:a:citrix:program_neighborhood_agent:8.0:*:win32:*:*:*:*:*

EPSS

Процентиль: 88%

0.03869

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9gcj-95cr-frx9

github

почти 4 года назад