CVE-2009-3936

no score yetEPSS 1.5%

Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/TLS server and bypass authentication via a crafted certificate, a different vulnerability than CVE-2009-3555.

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-310
Published: 2009-11-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

citrix:online_plug-in_for_mac
citrix:online_plug-in_for_windows
citrix:receiver_for_iphone

References

http://secunia.com/advisories/37319
http://support.citrix.com/article/CTX123248
http://www.securityfocus.com/bid/37073
http://www.securitytracker.com/id?1023168
http://www.vupen.com/english/advisories/2009/3206

Check your stack JSON