Security Advisories (RSS)

Citrix Presentation Server is prone to a buffer-overflow vulnerability because the IMA service fails to properly bounds-check user-supplied input before cpoying it to an insufficent sized memory buffer. The risk is HIGH. Successfully exploiting this issue may allow attackers to execute arbitrary machine code in the context of the IMA server process. The userid context that is compromised is SYSTEM. A remote, unathenticated, attacker could cause root-level compromise.Failed exploit attempts will likely result in denial-of-service conditions.


More...