CVE-2010-2991 in Online Plug-in
Summary
The IICAClient interface in the ICAClient library in the ICA Client ActiveX Object (aka ICO) component in Citrix Online Plug-in for Windows for XenApp & XenDesktop before 12.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HTML document that triggers the reading of a .ICA file.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
08/11/2010
Disclosure
08/11/2010
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 54344 | Citrix Online Plug-in ActiveX Object code injection | 94 | Not defined | Official fix | CVE-2010-2991 |