CVE-2006-5821

Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0…

published November 10, 2006

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture (IMA) service (ImaSrv.exe) with invalid size values that trigger the overflow during decryption.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05201 · 92.5th percentile
Published
2006-11-10T23:00Z
EPSS history
Timeline
  • 10 NOV 23:00Z
    Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0…
    cvelistv5