CVE-2006-5861: Citrix Metaframe

Medium severity, CVSS 5.0. EPSS: 4.4% chance of exploitation in the next 30 days.

The Independent Management Architecture (IMA) service (ImaSrv.exe) in Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to cause a denial of service (service exit) via a crafted packet that causes the service to access an unmapped memory address and triggers an unhandled exception.

Affected products

• Citrix Metaframe: version 1.0 only; version 2.0 only
• Citrix Metaframe Presentation Server: version 3.0 only; version 4.0 only

Published 2006-11-10. Last modified 2026-06-16.