Vulnerabilities > Citrix > Metaframe > High

DATE CVE VULNERABILITY TITLE RISK
2007-01-24 CVE-2007-0444 Buffer Errors vulnerability in Citrix Metaframe and Metaframe Presentation Server
Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions.
local
low complexity
citrix CWE-119
7.2
2006-11-10 CVE-2006-5821 Remote vulnerability in Citrix Metaframe and Metaframe Presentation Server
Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture (IMA) service (ImaSrv.exe) with invalid size values that trigger the overflow during decryption.
network
low complexity
citrix
7.5
2001-11-21 CVE-2001-0908 Unspecified vulnerability in Citrix Metaframe 1.8
CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g.
network
low complexity
citrix
7.5