CVE-2009-3936

Published: Nov 13, 2009Modified: Apr 23, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/TLS server and bypass authentication via a crafted certificate, a different vulnerability than CVE-2009-3555.

Affected (5)

Products: Citrix: Online Plug In For Mac, Online Plug In For Windows, Receiver For Iphone

Citrix

3 products

Online Plug In For Mac

Online Plug In For Windows

Receiver For Iphone

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Citrix Online Plug In For Mac	Up to 10.0
Citrix Online Plug In For Windows	Up to 11.2
Citrix Online Plug In For Windows	Version 11.0
Citrix Online Plug In For Windows	Version 11.1
Citrix Receiver For Iphone	Up to 1.0