vulnwire
4.3med

CVE-2007-3679

The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOControl Object) before 4.5.0.0 in npCtxCAO.dll in Citrix Access…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
4.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.7%
percentile 77%
Public exploits
0
none known

The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOControl Object) before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client system.

Exploit prediction (EPSS)

1.68% probability of exploitation in the next 30 days, higher than 77% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.04.3AV:N/AC:M/Au:N/C:N/I:P/A:N

References

  • osvdb.org /37845 · vdb-entry, x_refsource_OSVDB, x_transferred
  • vupen.com /english/advisories/2007/2583 · vdb-entry, x_refsource_VUPEN, x_transferred
  • securityreason.com /securityalert/2916 · third-party-advisory, x_refsource_SREASON, x_transferred
  • secunia.com /advisories/26143 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/24975 · vdb-entry, x_refsource_BID, x_transferred
  • securityfocus.com /archive/1/474204/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • symantec.com /content/en/us/enterprise/research/SYMSA-2007-006.txt · x_refsource_MISC, x_transferred
  • support.citrix.com /article/CTX113815 · x_refsource_CONFIRM, x_transferred
  • support.citrix.com /article/CTX114028 · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/24865 · vdb-entry, x_refsource_BID, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/35511 · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.