Unrated severityNVD Advisory· Published Jul 21, 2011· Updated Jun 16, 2026

CVE-2011-2882

Description

Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Citrix Systems/Access Gateway3 versions
cpe:2.3:a:citrix:access_gateway:8.1:*:enterprise:*:*:*:*:*+ 2 more
- cpe:2.3:a:citrix:access_gateway:8.1:*:enterprise:*:*:*:*:*
- cpe:2.3:a:citrix:access_gateway:9.0:*:enterprise:*:*:*:*:*
- cpe:2.3:a:citrix:access_gateway:9.1:*:enterprise:*:*:*:*:*
Citrix Systems/NetScaler Access Gateway Enterprise Editionllm-fuzzy
Range: <8.1-67.7, <9.0-70.5, <9.1-96.4

Patches

Vulnerability mechanics

References

labs.idefense.com/intelligence/vulnerabilities/display.phpnvd
securityreason.com/securityalert/8358nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.045
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000