CVE-2011-2593

Published: Aug 12, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Integer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a crafted Content-Length HTTP header, which triggers a heap-based buffer overflow.

Affected (2)

Products: Citrix: Access Gateway Plug In

1 product

Access Gateway Plug In

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Citrix Access Gateway Plug In	Up to 9.3
Citrix Access Gateway Plug In	Version 10.0

Related CWEs

References (8)

http://secunia.com/advisories/45299

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/secunia_research/2012-26

Source: PSIRT-CNA@flexerasoftware.com

http://support.citrix.com/article/CTX134303

Source: PSIRT-CNA@flexerasoftware.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/77317

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/45299

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/secunia_research/2012-26

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.citrix.com/article/CTX134303

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/77317

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.