« Volver al listado

CVE-2011-2882

Estado: ModificadaAlta (9.3)—

Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Citrix — Access Gateway

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-2882",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-07-21T23:55:04.270",
  "references": [
    {
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=929",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/8358",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=929",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/8358",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer basado en pila en el control ActiveX NSEPA.NsepaCtrl.1 en nsepa.ocx en Citrix Access Gateway Enterprise Edition v8.1 anterior a v8.1-67.7, v9.0 anterior a v9.0-70.5, y v9.1 anterior a v9.1-96.4 permite a atacantes remotos ejecutar código arbitrario a través de cabeceras HTTP manipuladas."
    }
  ],
  "lastModified": "2026-06-16T23:32:10.563",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:citrix:access_gateway:8.1:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A7BC4F8-DF07-499B-90CD-53EAB854014B"
            },
            {
              "criteria": "cpe:2.3:a:citrix:access_gateway:9.0:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0DCDF4DE-F0DF-427A-980C-62314FCE6A45"
            },
            {
              "criteria": "cpe:2.3:a:citrix:access_gateway:9.1:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F409FE7A-88D6-4FFB-8D78-0C0FCFB5DD8E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}