Citrix XenApp Online Plug-in ActiveX Control Remote Code Execution Vulnerability

Bugtraq ID:	42149
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 03 2010 12:00AM
Updated:	Aug 04 2010 11:05PM
Credit:	Sean of iDefense
Vulnerable:
Not Vulnerable:

Citrix XenApp Online Plug-in ActiveX Control Remote Code Execution Vulnerability

Citrix XenApp Online Plug-in is prone to a remote code-execution vulnerability that affects the ICA Client ActiveX Object (ICO) component.

An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage.

Successful exploits will allow the attacker to execute arbitrary code within the context of the application, typically Internet Explorer, that uses the ActiveX control.

Citrix XenApp Online Plug-in versions prior to 12.0.3 are vulnerable.

Citrix XenApp Online Plug-in ActiveX Control Remote Code Execution Vulnerability

Citrix XenApp Online Plug-in ActiveX Control Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for details.

Citrix XenApp Online Plug-in ActiveX Control Remote Code Execution Vulnerability

References:

• Citrix Homepage (Citrix)
  
• CTX125976 - Citrix XenApp Online Plug-in Vulnerability (Citrix)
  
• iDefense Security Advisory 08.03.10: Citrix ICA Client ActiveX Memory Corruptio (iDefense Labs )
  
• Citrix ICA Client ActiveX Memory Corruption Vulnerabillity (iDefense Labs)