Citrix Metaframe Presentation Server vulnerabilities

9 CVEs affecting Citrix Metaframe Presentation Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-3485, published 2008-08-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-0356, published 2008-01-18. High severity, CVSS 10.0. EPSS: 73% chance of exploitation in the next 30 days. Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop…
CVE-2007-0444, published 2007-01-24. High severity, CVSS 7.2. EPSS: 14% chance of exploitation in the next 30 days. Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote…
CVE-2006-5821, published 2006-11-10. High severity, CVSS 7.5. EPSS: 5.2% chance of exploitation in the next 30 days. Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute…
CVE-2006-5861, published 2006-11-10. Medium severity, CVSS 5.0. EPSS: 4.4% chance of exploitation in the next 30 days. The Independent Management Architecture (IMA) service (ImaSrv.exe) in Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to cause a denial of service…
CVE-2007-3625, published 2007-07-09. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. The Program Neighborhood Agent in Citrix Presentation Server Clients for 32-bit Windows before 10.100 allows remote attackers to cause a denial of service (agent exit) via a certain request that uses…
CVE-2008-2300, published 2008-05-18. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allows remote authenticated users to access…
CVE-2006-3779, published 2006-07-24. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain privileges.
CVE-2002-2426, published 2002-12-31. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote attackers to execute…
CVE-2008-3485, published 2008-08-06. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Untrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a malicious icabar.exe placed in the search path.