CVE-2011-2882
Citrix Access Gateway Enterprise Edition 8.1-67.7 9.0-70.5 9.1-96.4 - Remote Code Execution via Crafted HTTP Header Data
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-2882.
PoCs published by Metasploit, Michal Trojnara, bannedit, sinn3r, including Metasploit module exploits/windows/browser/citrix_gateway_actx.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in the Citrix Gateway ActiveX control (CVE-2011-2882) via a malicious HTML page. It uses heap spraying and a crafted CSEC parameter to achieve remote code execution when the victim interacts with a dialog.
Description
Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data.
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in the Citrix Gateway ActiveX control (CVE-2011-2882) via a malicious HTML page. It uses heap spraying and a crafted CSEC parameter to achieve remote code execution when the victim interacts with a dialog.
This Metasploit module exploits a stack-based buffer overflow in the Citrix Gateway ActiveX control (CVE-2011-2882) via a malicious HTML page. It uses heap spraying and a crafted CSEC parameter to achieve remote code execution when a user interacts with the exploit page.