Vulnerability in Citrix Presentation Server Client
CVE-2006-6334
Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer.
EPSS: 0.346 (98.3th percentile) — read the EPSS interpretation.
Affected products
- Citrix Presentation_server_client
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (Exploit, Patch, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC)