CVE-2004-1077 Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via....
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix metaframe client | = 8.0 | No fix listed |
| citrix program neighborhood agent | = 8.0 | No fix listed |
References
- 15108 patch third-party-advisory vendor-advisory
- support.citrix.com vendor-advisory
- 20050426 Citrix Program Neighborhood Agent Arbitrary Shortcut Creation Vulnerability patch third-party-advisory vendor-advisory