Heap-based Buffer Overflow in Citrix Presentation Server Client
CVE-2006-6334
Currently unrated
Key Information:
- Vendor
Citrix
- Vendor
- CVE Published:
- 8 December 2006
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 20%
What is CVE-2006-6334?
The heap-based buffer overflow vulnerability in the SendChannelData function of the Citrix Presentation Server Client allows attackers to exploit a flaw in the DataSize parameter. By submitting a value less than the actual length of the Data buffer, malicious remote websites can trigger an overflow condition, potentially leading to the execution of arbitrary code on the user's system. This vulnerability poses a significant risk, especially in environments relying on Citrix technologies for remote access.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.