CVE-2004-1077: Citrix Metaframe Client

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive.

Affected products

• Citrix Metaframe Client: version 8.0 only
• Citrix Program Neighborhood Agent: version 8.0 only

Published 2004-04-26. Last modified 2026-06-16.