VulnerabilityModified
CVE-2007-1196
Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors, related to the implementation of ICA connectivity through proxy servers.
HIGH 9.3EPSS 3.78%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.78%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors, related to the implementation of ICA connectivity through proxy servers.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 3.78% probability · 89th percentile
- CISA KEV
- Not listed
- Affected
- citrix/presentation server client
- Source
- cve@mitre.org
References
- http://osvdb.org/33833
- http://secunia.com/advisories/24350
- http://support.citrix.com/article/CTX112589
- http://www.kb.cert.org/vuls/id/798364US Government Resource
- http://www.securityfocus.com/bid/22762
- http://www.securitytracker.com/id?1017712
- http://www.vupen.com/english/advisories/2007/0784
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32754
- http://osvdb.org/33833
- http://secunia.com/advisories/24350
- http://support.citrix.com/article/CTX112589
- http://www.kb.cert.org/vuls/id/798364US Government Resource
- http://www.securityfocus.com/bid/22762
- http://www.securitytracker.com/id?1017712
- http://www.vupen.com/english/advisories/2007/0784
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32754
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.