Vulnerability in Citrix Metaframe Client

CVE-2004-1077

Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive.

EPSS: 0.012 (64.1th percentile) — read the EPSS interpretation.

Affected products

Citrix Metaframe_client — versions 8.0
Citrix Program_neighborhood_agent — versions 8.0
N/a — versions n/a

References

cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_IDEFENSE, Patch, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)