CVE-2006-6334: Citrix Presentation Server Client

Medium severity, CVSS 6.8. EPSS: 34.8% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer.

Affected products

• Citrix Presentation Server Client: up to and including 9.200

Published 2006-12-08. Last modified 2026-06-16.