CVE-2006-5821 | BDVDB-2026-20244 Detail
Description#
Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture (IMA) service (ImaSrv.exe) with invalid size values that trigger the overflow during decryption.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/archive/1/451337/100/100/threaded
- http://www.zerodayinitiative.com/advisories/ZDI-06-038.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30148
- http://securitytracker.com/id?1017205
- http://support.citrix.com/article/CTX111186
- http://www.securityfocus.com/bid/20986
- http://secunia.com/advisories/22802
- http://www.vupen.com/english/advisories/2006/4429
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.