CVE-2012-4603

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

Citrix XenApp Online Plug-in for Windows 12.1 and earlier, and Citrix Receiver for Windows 3.2 and earlier could allow remote attackers to execute arbitrary code by convincing a target to open a specially crafted file from an SMB or WebDAV fileserver.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/55518Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1027521Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1027522Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/78433Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/55518Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1027521Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1027522Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/78433Third Party Advisory, VDB Entry

Timeline

Published: Jan 10, 2020
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-46044.3The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass authentication and read arbitr CVE-2012-46055.0The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the "SurfControl plc\CVE-2012-46067.8Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 contains a Local Privilege Esca CVE-2012-46079.3Buffer overflow in nsrindexd in EMC NetWorker 7.5.x and 7.6.x before 7.6.5, and 8.x before 8.0.0.6, allows remote attackers to execute arbit CVE-2012-46086.8Cross-site request forgery (CSRF) vulnerability in the web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers t CVE-2012-46094.3The web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to conduct clickjacking attacks via unspecified vect CVE-2012-46103.3EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain CVE-2012-46114.3Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Adaptive Authentication On-Premise (AAOP) before 7.0 allow remote attackers t CVE-2012-46124.3Cross-site scripting (XSS) vulnerability in EMC RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x before 3.2.1 allows CVE-2012-46136.9EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a u CVE-2012-46149.3The default configuration of EMC Smarts Network Configuration Manager (NCM) before 9.1 does not require authentication for database access, CVE-2012-46152.1EMC Smarts Network Configuration Manager (NCM) before 9.1 uses a hardcoded encryption key for the storage of credentials, which allows local