CVEvulnerability

CVE-2010-2990

9.3 HIGH Published 2010-08-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-08-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Citrix ICA Client for Linux before 11.100, Citrix ICA Client for Solaris before 8.63, and Citrix Receiver for Windows Mobile before 11.5 allow remote attackers to execute arbitrary code via (1) a crafted HTML document, (2) a crafted .ICA file, or (3) a crafted type field in an ICA graphics packet, related to a "heap offset overflow" issue.

Affected configurations

• citrix ica client for linux (<= 11.0) • citrix ica client for solaris (<= 8.62) • citrix online plug-in for mac for xenapp \& xendesktop (<= 10.0) • citrix online plug-in for windows for xenapp \& xendesktop (<= 11.1) • citrix receiver for windows mobile (<= 11.0)

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References