Approved changes feed: RSS · Atom

cpe:2.3:a:citrix:online_plug-in_for_windows_for_xenapp_\&_xendesktop:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCitrix (d4086e08-6d3e-5a9c-9da4-36397da0fc58)
ProductOnline Plug In For Windows For Xenapp & Xendesktop (ae3723c8-cb09-51f2-bac8-1e75c6220629)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-2991 vulnerable 2026-06-08 04:55:11.924436 Details available
The IICAClient interface in the ICAClient library in the ICA Client ActiveX Object (aka ICO) component in Citrix Online Plug-in for Windows for XenApp & XenDesktop before 12.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HTML document that triggers the reading of a .ICA file.
Published: 2010-08-11T19:00:00.000Z
Updated: 2024-09-16T23:21:43.259Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2990 vulnerable 2026-06-08 04:55:11.923507 Details available
Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Citrix ICA Client for Linux before 11.100, Citrix ICA Client for Solaris before 8.63, and Citrix Receiver for Windows Mobile before 11.5 allow remote attackers to execute arbitrary code via (1) a crafted HTML document, (2) a crafted .ICA file, or (3) a crafted type field in an ICA graphics packet, related to a "heap offset overflow" issue.
Published: 2010-08-11T19:00:00.000Z
Updated: 2024-08-07T02:55:46.512Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.