Secunia

Patrik Karlsson has reported two vulnerabilities in Citrix Program Neighborhood Agent, which can be exploited by malicious people to compromise a user's system.

1) A boundary error in the caching of information received from servers can be exploited to cause a stack-based buffer overflow and execute arbitrary code on a client system.

2) A design error allows arbitrary shortcuts to be created on a client system with the privileges of the logged in user. This can be exploited to eg. execute arbitrary programs when a user logs in the next time by placing a shortcut in the Startup folder.

Successful exploitation requires that the client has been configured to point to a malicious server.

The following clients are affected:
* Program Neighborhood Agent for Win32
* Citrix MetaFrame Presentation Server client for WinCE (versions including Program Neighborhood Agent)

Solution
The vulnerabilities have been addressed in the listed client versions below, which are available at:
Further details available in Customer Area

Provided and/or discovered by
Patrik Karlsson

Changelog
Further details available in Customer Area

Original Advisory
Citrix:
http://support.citrix.com/kb/entry.jspa?entryID=6156&categoryID=149

iDEFENSE:
http://www.idefense.com/application/poi/display?id=237&type=vulnerabilities
http://www.idefense.com/application/poi/display?id=238&type=vulnerabilities

Deep Links
Links available in Customer Area