CVE-2005-3652

Citrix ICA Program Neighborhood Client <=9.0 - Remote Code Execution via Long Name Value

Title source: llm

Description

Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a long name value in an Application Set response.

References (8)

Core 8

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1015373

Vendor Advisory third-party-advisory x_refsource_idefense

http://www.idefense.com/application/poi/display?id=357&type=vulnerabilities

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18068

Patch vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/15907

Patch, Vendor Advisory x_refsource_confirm

http://support.citrix.com/kb/entry.jspa?externalID=CTX108354

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/266

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/21816

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2005/2944

Scores

EPSS 0.1130

EPSS Percentile 93.6%

Details

Status published

Products (1)

citrix/ica_program_neighborhood_client 9.1

Published Dec 16, 2005

Tracked Since Feb 18, 2026