Untrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a malicious icabar.exe placed in the search path.
https://exchange.xforce.ibmcloud.com/vulnerabilities/44490
http://www.securityfocus.com/bid/30446
http://www.securityfocus.com/archive/1/494952/100/0/threaded