Intrusion PreventionCitrix.Gateway.NsepaCtrl.1.ActiveX.Buffer.Overflow
Description
This indicates an attack attempt against a Buffer Overflow vulnerability in NSEPA NsepaCtrl ActiveX control in Citrix Access Gateway Enterprise Edition.
The vulnerability is caused by an error when the software handles specially crafted HTML data. It allows a remote attacker to execute arbitrary code.
Affected Products
NSEPA NsepaCtrl.1 ActiveX control in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4.
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Refer to the vendor's website for suggested workaround.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 29114 |
| Created | Sep 16, 2011 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2011-2882 |
| Exploit Prediction Score | 96.37% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |