CVE-2006-6334

Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer.

• http://fortconsult.net/files/fortconsult.dk/citrix_advisory_dec2006.pdf
• http://secunia.com/advisories/23246Vendor Advisory
• http://securityreason.com/securityalert/1995
• http://securitytracker.com/id?1017343Patch, Vendor Advisory
• http://support.citrix.com/article/CTX111827Exploit, Patch, Vendor Advisory
• http://www.citrix.com/English/SS/downloads/downloads.asp?dID=2755Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/210969US Government Resource
• http://www.securityfocus.com/archive/1/453760/100/0/threaded
• http://www.securityfocus.com/bid/21458Vendor Advisory
• http://www.tippingpoint.com/security/advisories/TSRT-06-15.htmlExploit, Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/4865
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30740
• https://www.exploit-db.com/exploits/5106
• http://fortconsult.net/files/fortconsult.dk/citrix_advisory_dec2006.pdf
• http://secunia.com/advisories/23246Vendor Advisory
• http://securityreason.com/securityalert/1995
• http://securitytracker.com/id?1017343Patch, Vendor Advisory
• http://support.citrix.com/article/CTX111827Exploit, Patch, Vendor Advisory
• http://www.citrix.com/English/SS/downloads/downloads.asp?dID=2755Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/210969US Government Resource
• http://www.securityfocus.com/archive/1/453760/100/0/threaded
• http://www.securityfocus.com/bid/21458Vendor Advisory
• http://www.tippingpoint.com/security/advisories/TSRT-06-15.htmlExploit, Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/4865
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30740
• https://www.exploit-db.com/exploits/5106

Published

Dec 8, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6328Directory traversal vulnerability in index.php for TorrentFl…
• CVE-2006-6329index.php for TorrentFlux 2.2 allows remote attackers to del…
• CVE-2006-6330index.php for TorrentFlux 2.2 allows remote registered users…
• CVE-2006-6331metaInfo.php in TorrentFlux 2.2, when $cfg["enable_file_prio…
• CVE-2006-6332Stack-based buffer overflow in net80211/ieee80211_wireless.c…
• CVE-2006-6333The tr_rx function in ibmtr.c for Linux kernel 2.6.19 assign…
• CVE-2006-6335Multiple buffer overflows in Sophos Anti-Virus scanning engi…
• CVE-2006-6336Heap-based buffer overflow in the Mail Management Server (MA…
• CVE-2006-6337Multiple SQL injection vulnerabilities in giris.asp in Aspee…
• CVE-2006-6338Unrestricted file upload vulnerability in upload/index.php i…
• CVE-2006-6339SQL injection vulnerability in sites/index.php in deV!L`z Cl…
• CVE-2006-6340keystone.exe in nVIDIA nView allows attackers to cause a den…