Vulnerability Scanning Solutions, LLC.
Home
Our Process
Residential
Corporate
What We Scan For
Sample Report
Client List
Terms
Contact Us
What We Scan For
Family: Windows --> Category: infos

Citrix Presentation Server Client Remote Code Execution Vulnerability Vulnerability Scan


Vulnerability Scan Summary
Checks version of Citrix ICA client

Detailed Explanation for this Vulnerability Test

Synopsis :

The remote Windows host has an application that is affected by a
remote code execution vulnerability.

Description :

Citrix Presentation Server Client is installed on the remote host. It
is used to access published resources such as applications stored on
servers running Citrix Presentation Server.

The version of Citrix Presentation Server Client on the remote host is
reportedly affected by an unspecified remote code execution
vulnerability involving ICA connections through proxy servers. An
attacker may be able to leverage this issue to execute arbitrary code
on the remote host subject to the user's rights if he can trick
the user into visiting a malicious web site.

See also :

http://support.citrix.com/article/CTX112589

Solution :

Upgrade to Citrix Presentation Server Client for Windows version 10.0
or later.

Threat Level:

High / CVSS Base Score : 8
(AV:R/AC:H/Au:NR/C:C/I:C/A:C/B:N)

Click HERE for more information and discussions on this network vulnerability scan.

VSS, LLC.

P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.