Lucene search

MitreCVE-2012-4603

HistoryJan 10, 2020 - 9:15 p.m.

CVE-2012-4603

2020-01-1021:15:11

CWE-20

mitre

web.nvd.nist.gov

122

cve-2012-4603

citrix xenapp

citrix receiver

windows

remote code execution

smb

webdav

fileserver

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.009

Percentile

83.2%

JSON

Citrix XenApp Online Plug-in for Windows 12.1 and earlier, and Citrix Receiver for Windows 3.2 and earlier could allow remote attackers to execute arbitrary code by convincing a target to open a specially crafted file from an SMB or WebDAV fileserver.

Affected configurations

Nvd

Node

citrixreceiverRange≤3.2

citrixxenapp_onlineRange≤12.1

AND

microsoftwindowsMatch-

VendorProductVersionCPE
citrixreceiver*cpe:2.3:a:citrix:receiver:*:*:*:*:*:*:*:*
citrixxenapp_online*cpe:2.3:a:citrix:xenapp_online:*:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
citrix	receiver	*	cpe:2.3:a:citrix:receiver::::::::
citrix	xenapp_online	*	cpe:2.3:a:citrix:xenapp_online::::::::
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*

References

www.securityfocus.com/bid/55518

www.securitytracker.com/id?1027521

www.securitytracker.com/id?1027522

exchange.xforce.ibmcloud.com/vulnerabilities/78433

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.009

Percentile

83.2%

JSON

Related for CVE-2012-4603