Unscored severity · published Mar 31, 2009
CVE-2008-6561
Citrix Presentation Server Client for Windows before 10.200 does not clear "credential information" from process memory in unspecified circumstances, which might allow local users…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Citrix Presentation Server Client for Windows before 10.200 does not clear "credential information" from process memory in unspecified circumstances, which might allow local users to gain privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PS
Presentation Server Client · Citrix
10.200 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-6561
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-6561
Patch
http://support.citrix.com/article/CTX116227
www.securitytracker.com
http://www.securitytracker.com/id?1019605
www.vupen.com
http://www.vupen.com/english/advisories/2008/0845
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41102
More from Presentation Server Client
–
CVE-2007-1196
Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors, related to the…
–
CVE-2006-6334
Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute…