CVE-2012-4603

Citrix XenApp Online Plug-in for Windows 12.1 and earlier, and Citrix Receiver for Windows 3.2 and earlier could allow remote attackers to execute arbitrary code by convincing a target to open a specially crafted file from an SMB or WebDAV fileserver.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2020-01-10

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Receiver (Citrix)
• Xenapp Online (Citrix)

References

• http://www.securityfocus.com/bid/55518
• http://www.securitytracker.com/id?1027521
• http://www.securitytracker.com/id?1027522
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78433