CVE-2007-3679 : The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOContr

The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOControl Object) before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client system.

Published 2007-07-25 17:30:00

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2007-3679

Citrix » Access Gateway » Standard Edition
Versions up to, including, (<=) 4.5.5
cpe:2.3:a:citrix:access_gateway:*:*:standard:*:*:*:*:*
Matching versions
Citrix » Access Gateway » Update HF1 Advanced Edition
Versions up to, including, (<=) 4.5
cpe:2.3:a:citrix:access_gateway:*:hf1:advanced:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-3679

EPSS FAQ

0.93%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 74 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-3679

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

References for CVE-2007-3679

Jump to

Vulnerability Details : CVE-2007-3679

Products affected by CVE-2007-3679

Exploit prediction scoring system (EPSS) score for CVE-2007-3679

CVSS scores for CVE-2007-3679

References for CVE-2007-3679