CVE - CVE-2006-6334

CVE-ID
CVE-2006-6334	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:21458 URL:http://www.securityfocus.com/bid/21458 BUGTRAQ:20061207 TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability URL:http://www.securityfocus.com/archive/1/453760/100/0/threaded CERT-VN:VU#210969 URL:http://www.kb.cert.org/vuls/id/210969 CONFIRM:http://support.citrix.com/article/CTX111827 CONFIRM:http://www.citrix.com/English/SS/downloads/downloads.asp?dID=2755 EXPLOIT-DB:5106 URL:https://www.exploit-db.com/exploits/5106 MISC:http://fortconsult.net/files/fortconsult.dk/citrix_advisory_dec2006.pdf MISC:http://www.tippingpoint.com/security/advisories/TSRT-06-15.html SECTRACK:1017343 URL:http://securitytracker.com/id?1017343 SECUNIA:23246 URL:http://secunia.com/advisories/23246 SREASON:1995 URL:http://securityreason.com/securityalert/1995 VUPEN:ADV-2006-4865 URL:~~http://www.vupen.com/english/advisories/2006/4865~~ (Obsolete source) XF:citrix-wfica-bo(30740) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/30740
Assigning CNA
MITRE Corporation
Date Record Created
20061206	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20061206)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)