PT-2001-2327 · Citrix · Citrix Ica Client

Published 2001-12-13 · Updated 2017-07-11 · CVE-2001-1192

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Citrix Independent Computing Architecture (ICA) Client for Windows version 6.1

Description The issue allows remote malicious websites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client.

Recommendations For Citrix Independent Computing Architecture (ICA) Client for Windows version 6.1, consider disabling the automatic execution of .ICA files as a temporary workaround until a patch is available. Restrict access to untrusted websites to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-1192

Affected Products

Citrix Ica Client

References · 4

• http://securityfocus.com/archive/1/245342 · Vendor Advisory
• http://securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3688 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1192 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7697 · Note