CVE-2007-3679
First published: Wed Jul 25 2007(Updated: )
The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOControl Object) before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client system.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Citrix Access Gateway | <=4.5.5 | |
| Citrix Access Gateway | <=4.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-006.txt
- http://support.citrix.com/article/CTX113815
- http://support.citrix.com/article/CTX114028
- http://www.securityfocus.com/bid/24865
- http://www.securityfocus.com/bid/24975
- http://secunia.com/advisories/26143
- http://securityreason.com/securityalert/2916
- http://osvdb.org/37845
- http://www.vupen.com/english/advisories/2007/2583
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35511
- http://www.securityfocus.com/archive/1/474204/100/0/threaded
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/weakness
- agent/tags
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- vendor/citrix
- canonical/citrix access gateway
- version/citrix access gateway/4.5.5
- version/citrix access gateway/4.5