CVE-2011-2883

CVE-2011-2883 describes a critical vulnerability in the NSEPA.NsepaCtrl.1 ActiveX control within Citrix Access Gateway Enterprise Edition versions 8.1, 9.0, and 9.1. The flaw stems from improper validation of signed DLLs, where the control checks only the certificate subject instead of the actual signature. This allows unauthenticated attackers to execute arbitrary code via man-in-the-middle attacks by injecting HTTP header data referencing a maliciously crafted, yet seemingly valid, DLL. With a CVSS score of 9.3, this vulnerability is highly severe, indicating a network-based attack with medium complexity that can lead to complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are also minimal, suggesting low public awareness and attention.