CVE-2006-5821: Buffer Overflow
Heap-based buffer overflow in the IMASECUREDecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture (IMA) service (ImaSrv.exe) with invalid size values that trigger the overflow during decryption.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5821?
CVE-2006-5821 has a critical severity level due to its potential to allow remote code execution.
How do I fix CVE-2006-5821?
To mitigate CVE-2006-5821, you should apply the latest patches or updates provided by Citrix for the affected versions.
Which versions of Citrix are affected by CVE-2006-5821?
CVE-2006-5821 affects Citrix MetaFrame XP versions 1.0 and 2.0, and Citrix Presentation Server versions 3.0 and 4.0.
Can CVE-2006-5821 be exploited remotely?
Yes, CVE-2006-5821 can be exploited remotely by sending specially crafted requests to the IMA service.
What component is vulnerable in CVE-2006-5821?
CVE-2006-5821 specifically affects the IMA_SECURE_DecryptData1 function in the ImaSystem.dll.