CVE Vulnerability

CVE-2007-4013

Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and earlier, (2) npCtxCAO.dll (aka Citrix Endpoint Analysis Client) in a Firefox plugin directory, and (3) a second npCtxCAO.dll (aka CCAOControl Object) before 4.5.0.0 in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 have unknown impact and attack vectors, possibly related to buffer overflows. NOTE: vector 3 might overlap CVE-2007-3679.

9.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

References
Link Resource
http://support.citrix.com/article/CTX113815 Patch
http://support.citrix.com/article/CTX114028 Patch
http://www.securityfocus.com/bid/24975 Patch
http://secunia.com/advisories/26143 Patch Vendor Advisory
http://osvdb.org/37843
http://osvdb.org/37844
http://osvdb.org/37842
http://www.vupen.com/english/advisories/2007/2583
Configurations

Configuration 1

cpe:2.3:a:citrix:access_gateway:*:hf1:advanced:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:citrix:endpoint_analysis_client:*:*:*:*:*:*:*:*
cpe:2.3:a:citrix:access_gateway:*:*:standard:*:*:*:*:*
cpe:2.3:a:citrix:access_gateway:*:hf1:advanced:*:*:*:*:*
cpe:2.3:a:citrix:access_gateway:*:*:standard:*:*:*:*:*
Information

Published : 2007-07-26 01:30

Updated : 2011-03-08 02:57

NVD link : CVE-2007-4013

Mitre link : CVE-2007-4013

Products Affected
No products.
CWE
NVD-CWE-Other