Description
Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive.
References
- 15108 third-party-advisory
- 20050426 Citrix Program Neighborhood Agent Arbitrary Shortcut Creation Vulnerability third-party-advisory
- http://support.citrix.com/kb/entry.jspa?externalID=CTX105650