Detections
Analytics
Citrix ICA Client Multiple Remote Code Execution Vulnerabilities
high Nessus Plugin ID 48275
Language:
Synopsis
The remote host contains an application that is affected by multiple remote code execution vulnerabilities.Description
The version of Citrix ICA Client installed on the remote host is older than 12.0.3. Such versions are reportedly affected by the following remote code execution vulnerabilities:A vulnerability can be exploited by tricking a user into connecting to a malicious server, via a malicious '.ICA' file or by other means, making it possible for an attacker to execute arbitrary code on the remote client.
Another vulnerability has been identified in the ICA Client ActiveX Object (ICO) component which can allow an attacker to execute arbitrary code on the remote client.
Solution
Upgrade to ICA Client 12.0.3 or later.See Also
https://support.citrix.com/article/CTX125975
Plugin Details
Severity: High
ID: 48275
File Name: citrix_ica_client_1203.nasl
Version: 1.11
Type: local
Agent: windows
Family: Windows
Published: 8/9/2010
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:citrix:ica_client_for_linux, cpe:/a:citrix:ica_client_for_solaris, cpe:/a:citrix:ica_client_for_windows_mobile
Required KB Items: SMB/Registry/Enumerated
Exploit Ease: No known exploits are available
Patch Publication Date: 5/28/2010
Vulnerability Publication Date: 8/2/2010
Reference Information
CVE: CVE-2010-2990, CVE-2010-2991