CVE:CVE-2012-4603
CNNVD:CNNVD-201209-297
Citrix Receiver是新型轻量级软件客户端，可随时随地通过任何设备访问桌面和应用。Citrix XenApp Online Plug-in是可访问主机应用或虚拟桌面的插件。
基于Windows平台的Citrix XenApp Online Plug-in 12.1及之前版本和Citrix Receiver 3.2及之前版本中存在安全漏洞。攻击者可借助特制的文件利用该漏洞执行任意代码。
solution:Upgrade citrix receiver to a higher version than 3.2,and avoid the version (,3.2]; Upgrade citrix xenapp_online to a higher version than 12.1,and avoid the version (,12.1]