CVE-2007-3679: Medium severity Citrix Access Gateway vulnerability
The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOControl Object) before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client system.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3679?
CVE-2007-3679 is considered critical due to its ability to allow remote attackers to execute arbitrary programs on client systems.
How do I fix CVE-2007-3679?
To fix CVE-2007-3679, upgrade to Citrix Access Gateway Standard Edition version 4.5.5 or Advanced Edition version 4.5 HF1 or later.
What software is affected by CVE-2007-3679?
CVE-2007-3679 affects Citrix Access Gateway Standard Edition versions prior to 4.5.5 and Advanced Edition versions prior to 4.5 HF1.
What type of attack does CVE-2007-3679 enable?
CVE-2007-3679 enables remote code execution, allowing unauthorized users to run programs on vulnerable client systems.
When was CVE-2007-3679 disclosed?
CVE-2007-3679 was disclosed in 2007, highlighting significant security risks in older versions of Citrix Access Gateway.