CVE-2006-5821 - Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture (IMA) service (ImaSrv.exe) with invalid size values that trigger the overflow during decryption

Back Back to CVE browser

HIGH

Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture (IMA) service (ImaSrv.exe) with invalid size values that trigger the overflow during decryption

Published Nov 10, 2006

7.5

HIGH

CVSS 2.0

EPSS 5.19%

Description

Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture (IMA) service (ImaSrv.exe) with invalid size values that trigger the overflow during decryption.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (9)

http://secunia.com/advisories/22802
third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1017205
vdb-entryx_refsource_SECTRACK
http://support.citrix.com/article/CTX111186
x_refsource_CONFIRMPatch
http://www.securityfocus.com/archive/1/451337/100/100/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/20986
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/4429
vdb-entryx_refsource_VUPEN
http://www.zerodayinitiative.com/advisories/ZDI-06-038.html
x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-5805
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30148
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/22802		third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1017205		vdb-entryx_refsource_SECTRACK
http://support.citrix.com/article/CTX111186		x_refsource_CONFIRMPatch
http://www.securityfocus.com/archive/1/451337/100/100/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/20986		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/4429		vdb-entryx_refsource_VUPEN
http://www.zerodayinitiative.com/advisories/ZDI-06-038.html		x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-5805		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30148		vdb-entryx_refsource_XF