CVE-2006-5821

Description

Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture (IMA) service (ImaSrv.exe) with invalid size values that trigger the overflow during decryption.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/30148

http://www.zerodayinitiative.com/advisories/ZDI-06-038.html

http://www.vupen.com/english/advisories/2006/4429

http://www.securityfocus.com/bid/20986

http://www.securityfocus.com/archive/1/451337/100/100/threaded

http://support.citrix.com/article/CTX111186

http://securitytracker.com/id?1017205

http://secunia.com/advisories/22802

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS