Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a long name value in an Application Set response.
http://www.vupen.com/english/advisories/2005/2944
http://www.securityfocus.com/bid/15907
http://www.idefense.com/application/poi/display?id=357&type=vulnerabilities
http://support.citrix.com/kb/entry.jspa?externalID=CTX108354
http://securitytracker.com/id?1015373