CVE-2010-2990

Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Citrix ICA Client for Linux before 11.100, Citrix ICA Client for Solaris before 8.63, and Citrix Receiver for Windows Mobile before 11.5 allow remote attackers to execute arbitrary code via (1) a crafted HTML document, (2) a crafted .ICA file, or (3) a crafted type field in an ICA graphics packet, related to a "heap offset overflow" issue.

• CWE-119

• http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0040.html
• http://secunia.com/advisories/40808Vendor Advisory
• http://support.citrix.com/article/CTX125975Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/512861/100/0/threaded
• http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0040.html
• http://secunia.com/advisories/40808Vendor Advisory
• http://support.citrix.com/article/CTX125975Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/512861/100/0/threaded

Published

Aug 11, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2984Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0…
• CVE-2010-2985Multiple cross-site scripting (XSS) vulnerabilities in IBM W…
• CVE-2010-2986Cross-site scripting (XSS) vulnerability in webacs/QuickSear…
• CVE-2010-2987Multiple cross-site scripting (XSS) vulnerabilities in Cisco…
• CVE-2010-2988Cross-site scripting (XSS) vulnerability in Cisco Unified Wi…
• CVE-2010-2989nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.…
• CVE-2010-2991The IICAClient interface in the ICAClient library in the ICA…
• CVE-2010-2992packet-gsm_a_rr.c in the GSM A RR dissector in Wireshark 1.2…
• CVE-2010-2993The IPMI dissector in Wireshark 1.2.0 through 1.2.9 allows r…
• CVE-2010-2994Stack-based buffer overflow in the ASN.1 BER dissector in Wi…
• CVE-2010-2995The SigComp Universal Decompressor Virtual Machine (UDVM) in…
• CVE-2010-2996Array index error in RealNetworks RealPlayer 11.0 through 11…