CVE-2011-2882

This Metasploit module exploits a stack-based buffer overflow in the Citrix Gateway ActiveX control (CVE-2011-2882) via a malicious HTML page. It uses heap spraying and a crafted CSEC parameter to achieve remote code execution when the victim interacts with a dialog.

This Metasploit module exploits a stack-based buffer overflow in the Citrix Gateway ActiveX control (CVE-2011-2882) via a malicious HTML page. It uses heap spraying and a crafted CSEC parameter to achieve remote code execution when a user interacts with the exploit page.