CVE-2010-2990

CRITICO 9.3CVE-2010-2990 · Published 11/08/2010 · updated 16/06/2026

In breve

CVE-2010-2990 è una vulnerabilità CRITICO (CVSS 9.3) che riguarda ica client for linux (citrix), ica client for solaris (citrix), online plug-in for mac for xenapp & xendesktop (citrix).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.9%, superiore al 92.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
ica client for linux citrix	`≤ 11.0`	No fix yet
ica client for solaris citrix	`≤ 8.62`	No fix yet
online plug-in for mac for xenapp & xendesktop citrix	`≤ 10.0`	No fix yet
online plug-in for windows for xenapp & xendesktop citrix	`≤ 11.1`	No fix yet
receiver for windows mobile citrix	`≤ 11.0`	No fix yet

Description

Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Citrix ICA Client for Linux before 11.100, Citrix ICA Client for Solaris before 8.63, and Citrix Receiver for Windows Mobile before 11.5 allow remote attackers to execute arbitrary code via (1) a crafted HTML document, (2) a crafted .ICA file, or (3) a crafted type field in an ICA graphics packet, related to a "heap offset overflow" issue.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free