CVE-2007-4013 json
Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and earlier, (2) npCtxCAO.dll (aka Citrix Endpoin…
published 2007-07-26 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-3997
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 4.2%
- EPSS 4.2% chance of exploitation in 30 days, percentile 91%
- public exploits
- 0
- none known
Summary
Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and earlier, (2) npCtxCAO.dll (aka Citrix Endpoint Analysis Client) in a Firefox plugin directory, and (3) a second npCtxCAO.dll (aka CCAOControl Object) before 4.5.0.0 in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 have unknown impact and attack vectors, possibly related to buffer overflows. NOTE: vector 3 might overlap CVE-2007-3679.
Patch / fix
Exploit prediction
4.23% chance of exploitation in the next 30 days, higher than 91% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
References
-
secunia.com
/advisories/26143
third-party-advisory, patch, vendor-advisory
-
securityfocus.com
/bid/24975
vdb-entry, patch
-
support.citrix.com
/article/CTX113815
patch
-
support.citrix.com
/article/CTX114028
patch
-
vupen.com
/english/advisories/2007/2583
vdb-entry
-
osvdb.org
/37843
vdb-entry
-
osvdb.org
/37844
vdb-entry
-
osvdb.org
/37842
vdb-entry
Sources
- CVE List CVE-2007-4013
- NVD CVE-2007-4013
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.