9.3

CVE-2011-2592

Heap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a long CSEC HTTP response header.

Data is provided by the National Vulnerability Database (NVD)
Citrix ≫ Access Gateway Plug-in Version9.0 SwEditionenterprise SwPlatformwindows
Citrix ≫ Access Gateway Plug-in Version9.1 SwEditionenterprise SwPlatformwindows
Citrix ≫ Access Gateway Plug-in Version9.2 SwEditionenterprise SwPlatformwindows
Citrix ≫ Access Gateway Plug-in Version9.3 SwEditionenterprise SwPlatformwindows
Citrix ≫ Access Gateway Plug-in Version10.0 SwEditionenterprise SwPlatformwindows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 18.5% 0.947
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.