Search
Find a vulnerability
Search criteria
6 vulnerabilities found for presentation_server_client by citrix
CVE-2008-6561 (GCVE-0-2008-6561)
Vulnerability from nvd – Published: 2009-03-31 17:00 – Updated: 2024-08-07 11:34
VLAI
EPSS
VEX
Summary
Citrix Presentation Server Client for Windows before 10.200 does not clear "credential information" from process memory in unspecified circumstances, which might allow local users to gain privileges.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2008/0845 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://support.citrix.com/article/CTX116227 | x_refsource_CONFIRM |
| http://www.securitytracker.com/id?1019605 | vdb-entryx_refsource_SECTRACK |
Date Public
2008-03-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T11:34:47.070Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2008-0845",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/0845"
},
{
"name": "citrix-credential-information-disclosure(41102)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41102"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.citrix.com/article/CTX116227"
},
{
"name": "1019605",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1019605"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-03-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Citrix Presentation Server Client for Windows before 10.200 does not clear \"credential information\" from process memory in unspecified circumstances, which might allow local users to gain privileges."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2008-0845",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/0845"
},
{
"name": "citrix-credential-information-disclosure(41102)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41102"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.citrix.com/article/CTX116227"
},
{
"name": "1019605",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1019605"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-6561",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Citrix Presentation Server Client for Windows before 10.200 does not clear \"credential information\" from process memory in unspecified circumstances, which might allow local users to gain privileges."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2008-0845",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0845"
},
{
"name": "citrix-credential-information-disclosure(41102)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41102"
},
{
"name": "http://support.citrix.com/article/CTX116227",
"refsource": "CONFIRM",
"url": "http://support.citrix.com/article/CTX116227"
},
{
"name": "1019605",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1019605"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-6561",
"datePublished": "2009-03-31T17:00:00.000Z",
"dateReserved": "2009-03-31T00:00:00.000Z",
"dateUpdated": "2024-08-07T11:34:47.070Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-1196 (GCVE-0-2007-1196)
Vulnerability from nvd – Published: 2007-03-02 19:00 – Updated: 2024-08-07 12:50
VLAI
EPSS
VEX
Summary
Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors, related to the implementation of ICA connectivity through proxy servers.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/24350 | third-party-advisoryx_refsource_SECUNIA |
| http://www.kb.cert.org/vuls/id/798364 | third-party-advisoryx_refsource_CERT-VN |
| http://support.citrix.com/article/CTX112589 | x_refsource_CONFIRM |
| http://www.securitytracker.com/id?1017712 | vdb-entryx_refsource_SECTRACK |
| http://www.vupen.com/english/advisories/2007/0784 | vdb-entryx_refsource_VUPEN |
| http://osvdb.org/33833 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/bid/22762 | vdb-entryx_refsource_BID |
Date Public
2007-02-28 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T12:50:35.234Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "citrix-ica-code-execution(32754)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32754"
},
{
"name": "24350",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24350"
},
{
"name": "VU#798364",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/798364"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.citrix.com/article/CTX112589"
},
{
"name": "1017712",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1017712"
},
{
"name": "ADV-2007-0784",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/0784"
},
{
"name": "33833",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/33833"
},
{
"name": "22762",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/22762"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-02-28T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors, related to the implementation of ICA connectivity through proxy servers."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "citrix-ica-code-execution(32754)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32754"
},
{
"name": "24350",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24350"
},
{
"name": "VU#798364",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/798364"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.citrix.com/article/CTX112589"
},
{
"name": "1017712",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1017712"
},
{
"name": "ADV-2007-0784",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/0784"
},
{
"name": "33833",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/33833"
},
{
"name": "22762",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/22762"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-1196",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors, related to the implementation of ICA connectivity through proxy servers."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "citrix-ica-code-execution(32754)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32754"
},
{
"name": "24350",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/24350"
},
{
"name": "VU#798364",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/798364"
},
{
"name": "http://support.citrix.com/article/CTX112589",
"refsource": "CONFIRM",
"url": "http://support.citrix.com/article/CTX112589"
},
{
"name": "1017712",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1017712"
},
{
"name": "ADV-2007-0784",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/0784"
},
{
"name": "33833",
"refsource": "OSVDB",
"url": "http://osvdb.org/33833"
},
{
"name": "22762",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/22762"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-1196",
"datePublished": "2007-03-02T19:00:00.000Z",
"dateReserved": "2007-03-02T00:00:00.000Z",
"dateUpdated": "2024-08-07T12:50:35.234Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-6334 (GCVE-0-2006-6334)
Vulnerability from nvd – Published: 2006-12-08 01:00 – Updated: 2024-08-07 20:19
VLAI
EPSS
VEX
Summary
Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
13 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/23246 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/1995 | third-party-advisoryx_refsource_SREASON |
| http://www.vupen.com/english/advisories/2006/4865 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/21458 | vdb-entryx_refsource_BID |
| https://www.exploit-db.com/exploits/5106 | exploitx_refsource_EXPLOIT-DB |
| http://www.kb.cert.org/vuls/id/210969 | third-party-advisoryx_refsource_CERT-VN |
| http://www.tippingpoint.com/security/advisories/T… | x_refsource_MISC |
| http://support.citrix.com/article/CTX111827 | x_refsource_CONFIRM |
| http://fortconsult.net/files/fortconsult.dk/citri… | x_refsource_MISC |
| http://securitytracker.com/id?1017343 | vdb-entryx_refsource_SECTRACK |
| http://www.citrix.com/English/SS/downloads/downlo… | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/453760/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2006-12-04 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T20:19:35.175Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "23246",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23246"
},
{
"name": "1995",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/1995"
},
{
"name": "ADV-2006-4865",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/4865"
},
{
"name": "citrix-wfica-bo(30740)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30740"
},
{
"name": "21458",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/21458"
},
{
"name": "5106",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/5106"
},
{
"name": "VU#210969",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/210969"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.tippingpoint.com/security/advisories/TSRT-06-15.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.citrix.com/article/CTX111827"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://fortconsult.net/files/fortconsult.dk/citrix_advisory_dec2006.pdf"
},
{
"name": "1017343",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1017343"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.citrix.com/English/SS/downloads/downloads.asp?dID=2755"
},
{
"name": "20061207 TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/453760/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-12-04T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "23246",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23246"
},
{
"name": "1995",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/1995"
},
{
"name": "ADV-2006-4865",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/4865"
},
{
"name": "citrix-wfica-bo(30740)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30740"
},
{
"name": "21458",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/21458"
},
{
"name": "5106",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/5106"
},
{
"name": "VU#210969",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/210969"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.tippingpoint.com/security/advisories/TSRT-06-15.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.citrix.com/article/CTX111827"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://fortconsult.net/files/fortconsult.dk/citrix_advisory_dec2006.pdf"
},
{
"name": "1017343",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1017343"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.citrix.com/English/SS/downloads/downloads.asp?dID=2755"
},
{
"name": "20061207 TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/453760/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-6334",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "23246",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23246"
},
{
"name": "1995",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/1995"
},
{
"name": "ADV-2006-4865",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/4865"
},
{
"name": "citrix-wfica-bo(30740)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30740"
},
{
"name": "21458",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/21458"
},
{
"name": "5106",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/5106"
},
{
"name": "VU#210969",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/210969"
},
{
"name": "http://www.tippingpoint.com/security/advisories/TSRT-06-15.html",
"refsource": "MISC",
"url": "http://www.tippingpoint.com/security/advisories/TSRT-06-15.html"
},
{
"name": "http://support.citrix.com/article/CTX111827",
"refsource": "CONFIRM",
"url": "http://support.citrix.com/article/CTX111827"
},
{
"name": "http://fortconsult.net/files/fortconsult.dk/citrix_advisory_dec2006.pdf",
"refsource": "MISC",
"url": "http://fortconsult.net/files/fortconsult.dk/citrix_advisory_dec2006.pdf"
},
{
"name": "1017343",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1017343"
},
{
"name": "http://www.citrix.com/English/SS/downloads/downloads.asp?dID=2755",
"refsource": "CONFIRM",
"url": "http://www.citrix.com/English/SS/downloads/downloads.asp?dID=2755"
},
{
"name": "20061207 TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/453760/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-6334",
"datePublished": "2006-12-08T01:00:00.000Z",
"dateReserved": "2006-12-06T00:00:00.000Z",
"dateUpdated": "2024-08-07T20:19:35.175Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2008-6561 (GCVE-0-2008-6561)
Vulnerability from cvelistv5 – Published: 2009-03-31 17:00 – Updated: 2024-08-07 11:34
VLAI
EPSS
VEX
Summary
Citrix Presentation Server Client for Windows before 10.200 does not clear "credential information" from process memory in unspecified circumstances, which might allow local users to gain privileges.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2008/0845 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://support.citrix.com/article/CTX116227 | x_refsource_CONFIRM |
| http://www.securitytracker.com/id?1019605 | vdb-entryx_refsource_SECTRACK |
Date Public
2008-03-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T11:34:47.070Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2008-0845",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/0845"
},
{
"name": "citrix-credential-information-disclosure(41102)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41102"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.citrix.com/article/CTX116227"
},
{
"name": "1019605",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1019605"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-03-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Citrix Presentation Server Client for Windows before 10.200 does not clear \"credential information\" from process memory in unspecified circumstances, which might allow local users to gain privileges."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2008-0845",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/0845"
},
{
"name": "citrix-credential-information-disclosure(41102)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41102"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.citrix.com/article/CTX116227"
},
{
"name": "1019605",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1019605"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-6561",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Citrix Presentation Server Client for Windows before 10.200 does not clear \"credential information\" from process memory in unspecified circumstances, which might allow local users to gain privileges."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2008-0845",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0845"
},
{
"name": "citrix-credential-information-disclosure(41102)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41102"
},
{
"name": "http://support.citrix.com/article/CTX116227",
"refsource": "CONFIRM",
"url": "http://support.citrix.com/article/CTX116227"
},
{
"name": "1019605",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1019605"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-6561",
"datePublished": "2009-03-31T17:00:00.000Z",
"dateReserved": "2009-03-31T00:00:00.000Z",
"dateUpdated": "2024-08-07T11:34:47.070Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-1196 (GCVE-0-2007-1196)
Vulnerability from cvelistv5 – Published: 2007-03-02 19:00 – Updated: 2024-08-07 12:50
VLAI
EPSS
VEX
Summary
Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors, related to the implementation of ICA connectivity through proxy servers.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/24350 | third-party-advisoryx_refsource_SECUNIA |
| http://www.kb.cert.org/vuls/id/798364 | third-party-advisoryx_refsource_CERT-VN |
| http://support.citrix.com/article/CTX112589 | x_refsource_CONFIRM |
| http://www.securitytracker.com/id?1017712 | vdb-entryx_refsource_SECTRACK |
| http://www.vupen.com/english/advisories/2007/0784 | vdb-entryx_refsource_VUPEN |
| http://osvdb.org/33833 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/bid/22762 | vdb-entryx_refsource_BID |
Date Public
2007-02-28 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T12:50:35.234Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "citrix-ica-code-execution(32754)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32754"
},
{
"name": "24350",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24350"
},
{
"name": "VU#798364",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/798364"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.citrix.com/article/CTX112589"
},
{
"name": "1017712",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1017712"
},
{
"name": "ADV-2007-0784",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/0784"
},
{
"name": "33833",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/33833"
},
{
"name": "22762",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/22762"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-02-28T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors, related to the implementation of ICA connectivity through proxy servers."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "citrix-ica-code-execution(32754)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32754"
},
{
"name": "24350",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24350"
},
{
"name": "VU#798364",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/798364"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.citrix.com/article/CTX112589"
},
{
"name": "1017712",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1017712"
},
{
"name": "ADV-2007-0784",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/0784"
},
{
"name": "33833",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/33833"
},
{
"name": "22762",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/22762"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-1196",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors, related to the implementation of ICA connectivity through proxy servers."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "citrix-ica-code-execution(32754)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32754"
},
{
"name": "24350",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/24350"
},
{
"name": "VU#798364",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/798364"
},
{
"name": "http://support.citrix.com/article/CTX112589",
"refsource": "CONFIRM",
"url": "http://support.citrix.com/article/CTX112589"
},
{
"name": "1017712",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1017712"
},
{
"name": "ADV-2007-0784",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/0784"
},
{
"name": "33833",
"refsource": "OSVDB",
"url": "http://osvdb.org/33833"
},
{
"name": "22762",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/22762"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-1196",
"datePublished": "2007-03-02T19:00:00.000Z",
"dateReserved": "2007-03-02T00:00:00.000Z",
"dateUpdated": "2024-08-07T12:50:35.234Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-6334 (GCVE-0-2006-6334)
Vulnerability from cvelistv5 – Published: 2006-12-08 01:00 – Updated: 2024-08-07 20:19
VLAI
EPSS
VEX
Summary
Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
13 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/23246 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/1995 | third-party-advisoryx_refsource_SREASON |
| http://www.vupen.com/english/advisories/2006/4865 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/21458 | vdb-entryx_refsource_BID |
| https://www.exploit-db.com/exploits/5106 | exploitx_refsource_EXPLOIT-DB |
| http://www.kb.cert.org/vuls/id/210969 | third-party-advisoryx_refsource_CERT-VN |
| http://www.tippingpoint.com/security/advisories/T… | x_refsource_MISC |
| http://support.citrix.com/article/CTX111827 | x_refsource_CONFIRM |
| http://fortconsult.net/files/fortconsult.dk/citri… | x_refsource_MISC |
| http://securitytracker.com/id?1017343 | vdb-entryx_refsource_SECTRACK |
| http://www.citrix.com/English/SS/downloads/downlo… | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/453760/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2006-12-04 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T20:19:35.175Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "23246",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23246"
},
{
"name": "1995",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/1995"
},
{
"name": "ADV-2006-4865",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/4865"
},
{
"name": "citrix-wfica-bo(30740)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30740"
},
{
"name": "21458",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/21458"
},
{
"name": "5106",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/5106"
},
{
"name": "VU#210969",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/210969"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.tippingpoint.com/security/advisories/TSRT-06-15.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.citrix.com/article/CTX111827"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://fortconsult.net/files/fortconsult.dk/citrix_advisory_dec2006.pdf"
},
{
"name": "1017343",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1017343"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.citrix.com/English/SS/downloads/downloads.asp?dID=2755"
},
{
"name": "20061207 TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/453760/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-12-04T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "23246",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23246"
},
{
"name": "1995",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/1995"
},
{
"name": "ADV-2006-4865",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/4865"
},
{
"name": "citrix-wfica-bo(30740)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30740"
},
{
"name": "21458",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/21458"
},
{
"name": "5106",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/5106"
},
{
"name": "VU#210969",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/210969"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.tippingpoint.com/security/advisories/TSRT-06-15.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.citrix.com/article/CTX111827"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://fortconsult.net/files/fortconsult.dk/citrix_advisory_dec2006.pdf"
},
{
"name": "1017343",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1017343"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.citrix.com/English/SS/downloads/downloads.asp?dID=2755"
},
{
"name": "20061207 TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/453760/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-6334",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "23246",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23246"
},
{
"name": "1995",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/1995"
},
{
"name": "ADV-2006-4865",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/4865"
},
{
"name": "citrix-wfica-bo(30740)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30740"
},
{
"name": "21458",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/21458"
},
{
"name": "5106",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/5106"
},
{
"name": "VU#210969",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/210969"
},
{
"name": "http://www.tippingpoint.com/security/advisories/TSRT-06-15.html",
"refsource": "MISC",
"url": "http://www.tippingpoint.com/security/advisories/TSRT-06-15.html"
},
{
"name": "http://support.citrix.com/article/CTX111827",
"refsource": "CONFIRM",
"url": "http://support.citrix.com/article/CTX111827"
},
{
"name": "http://fortconsult.net/files/fortconsult.dk/citrix_advisory_dec2006.pdf",
"refsource": "MISC",
"url": "http://fortconsult.net/files/fortconsult.dk/citrix_advisory_dec2006.pdf"
},
{
"name": "1017343",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1017343"
},
{
"name": "http://www.citrix.com/English/SS/downloads/downloads.asp?dID=2755",
"refsource": "CONFIRM",
"url": "http://www.citrix.com/English/SS/downloads/downloads.asp?dID=2755"
},
{
"name": "20061207 TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/453760/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-6334",
"datePublished": "2006-12-08T01:00:00.000Z",
"dateReserved": "2006-12-06T00:00:00.000Z",
"dateUpdated": "2024-08-07T20:19:35.175Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}