CVE-2007-3679 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-3679
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3679

Description: The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOControl Object) before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client system.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/35511 SREASON http://securityreason.com/securityalert/2916 SAID Secunia Advisory: SA26143 OSVDB 37845 MISC http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-006.txt CONFIRM http://support.citrix.com/article/CTX114028 http://support.citrix.com/article/CTX113815 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/474204/100/0/threaded BID 24975 24865

Return to the previous page.