| Package | Affected versions | Patched versions |
|---|---|---|
| access gateway plug-in | = 10.0= 9.0= 9.1= 9.2= 9.3 |
Heap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a long CSEC HTTP response header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free