CVE-2011-2592

Related Files

Citrix Access Gateway Plug-in For Windows nsepacom Buffer Overflow

Posted Aug 1, 2012

Authored by Dmitriy Pletnev | Site secunia.com

Secunia Research has discovered a vulnerability in Citrix Access Gateway Plug-in for Windows, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused by a boundary error in the nsepacom ActiveX control (nsepa.exe) when processing HTTP responses based on the request via the "StartEpa()" method. This can be exploited to cause a heap-based buffer overflow via an overly long "CSEC" HTTP response header. Successful exploitation allows execution of arbitrary code. Citrix Access Gateway Plug-in for Windows version 9.3.49.5 is affected.

tags | advisory, web, overflow, arbitrary, activex

systems | windows

advisories | CVE-2011-2592

SHA-256 | 88190841a21f5703514230e00d059f52693aa6867752ab05cf5658926bb7ec55

Download | Favorite | View