CVE-2010-2990

Published: Aug 11, 2010Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Citrix ICA Client for Linux before 11.100, Citrix ICA Client for Solaris before 8.63, and Citrix Receiver for Windows Mobile before 11.5 allow remote attackers to execute arbitrary code via (1) a crafted HTML document, (2) a crafted .ICA file, or (3) a crafted type field in an ICA graphics packet, related to a "heap offset overflow" issue.

Affected (5)

Products: Citrix: Ica Client For Linux, Ica Client For Solaris, Online Plug In For Mac For Xenapp & Xendesktop, Online Plug In For Windows For Xenapp & Xendesktop, Receiver For Windows Mobile

Citrix

5 products

Ica Client For Linux

Ica Client For Solaris

Online Plug In For Mac For Xenapp & Xendesktop

Online Plug In For Windows For Xenapp & Xendesktop

Receiver For Windows Mobile

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Citrix Ica Client For Linux	Up to 11.0
Citrix Ica Client For Solaris	Up to 8.62
Citrix Online Plug In For Mac For Xenapp & Xendesktop	Up to 10.0
Citrix Online Plug In For Windows For Xenapp & Xendesktop	Up to 11.1
Citrix Receiver For Windows Mobile	Up to 11.0