CVE-2012-4603

Опубликовано: 10 янв. 2020

Источник: nvd

CVSS3: 7.8

CVSS2: 9.3

EPSS Низкий

Описание

Citrix XenApp Online Plug-in for Windows 12.1 and earlier, and Citrix Receiver for Windows 3.2 and earlier could allow remote attackers to execute arbitrary code by convincing a target to open a specially crafted file from an SMB or WebDAV fileserver.

Ссылки

http://www.securityfocus.com/bid/55518
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1027521
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1027522
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/78433
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/55518
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1027521
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1027522
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/78433
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:citrix:receiver:*:*:*:*:*:*:*:*

Версия до 3.2 (включая)

cpe:2.3:a:citrix:xenapp_online:*:*:*:*:*:*:*:*

Версия до 12.1 (включая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05777

Низкий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-777h-83ch-p736

github

почти 4 года назад