Vulnerabilities > Citrix > Metaframe Presentation Server > High

DATE CVE VULNERABILITY TITLE RISK
2008-08-06 CVE-2008-3485 Permissions, Privileges, and Access Controls vulnerability in Citrix Metaframe Presentation Server and XP
Untrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a malicious icabar.exe placed in the search path.
local
low complexity
citrix CWE-264
7.2
2007-01-24 CVE-2007-0444 Buffer Errors vulnerability in Citrix Metaframe and Metaframe Presentation Server
Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions.
local
low complexity
citrix CWE-119
7.2
2006-11-10 CVE-2006-5821 Remote vulnerability in Citrix Metaframe and Metaframe Presentation Server
Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture (IMA) service (ImaSrv.exe) with invalid size values that trigger the overflow during decryption.
network
low complexity
citrix
7.5