CVE-2016-9678
CriticalSummary
Use-after-free vulnerability in Citrix Provisioning Services before version 7.12 allows attackers to execute arbitrary code via unspecified vectors.
Risk Assessment
Exploitation of this vulnerability could lead to system compromise, posing a significant security risk to the organization.
Recommendation
It is recommended to upgrade Citrix Provisioning Services to version 7.12 or later to mitigate this vulnerability.
Other vulnerabilities in Citrix Provisioning Services
See all- CVE-2016-9680High
Citrix Provisioning Services before version 7.12 allows attackers to obtain sensitive information from kernel memory via unspecified vectors.
- CVE-2016-9679Critical
Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer.
- CVE-2016-9676Critical
Buffer overflow in Citrix Provisioning Services before version 7.12 allows attackers to execute arbitrary code via unspecified vectors.
Original NVD description (English source)
Use-after-free vulnerability in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors.