Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client.
https://exchange.xforce.ibmcloud.com/vulnerabilities/7697
http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3688