CVE-2011-2593

CVE-2011-2593 describes an integer overflow vulnerability in the nsepacom ActiveX control within the Citrix Access Gateway Enterprise Edition Plug-in for Windows, affecting versions 9.x before 9.3-57.5 and 10.0 before 10.0-69.4. This flaw, triggered by a crafted Content-Length HTTP header, leads to a heap-based buffer overflow, enabling remote attackers to execute arbitrary code. With a CVSS score of 6.8, it represents a medium severity risk, requiring moderate attack complexity but potentially leading to partial confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.