CVE-2004-1078

Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2004-04-26

Last modified

2024-08-08

Affected products

• Metaframe Client (Citrix)
• Program Neighborhood Agent (Citrix)

References

• http://secunia.com/advisories/15108
• http://support.citrix.com/kb/entry.jspa?externalID=CTX105650
• http://www.idefense.com/application/poi/display?id=238&type=vulnerabilities