A vulnerability has been reported in Citrix XenApp Online Plug-in and ICA Clients, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error when processing the "type" field in an ICA "graphics" packet, which can be exploited to execute arbitrary code when a user establishes an ICA connection to a malicious server, e.g. by invoking an .ICA file or via an ICA client browser plug-in when browsing a specially crafted web page.

The vulnerability is reported in the following products and versions:
* Citrix Online Plug-in for Windows for XenApp & XenDesktop prior to version 11.2
* Citrix Online Plug-in for Mac for XenApp & XenDesktop prior to version 11.0
* Citrix ICA Client for Linux (x86 and ARM) prior to version 11.100
* Citrix ICA Client for Solaris (x86 and Sparc) prior to version 8.63
* Citrix Receiver for Windows Mobile prior to version 11.5

Solution
Update to the fixed versions.
Further details available in Customer Area

Provided and/or discovered by
Michael Jordon, Context Information Security Ltd.

Changelog
Further details available in Customer Area

Original Advisory
Citrix:
http://support.citrix.com/article/CTX125975

Context Information Security Ltd.:
http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0040.html

Deep Links
Links available in Customer Area