CVE-2006-5821

CVE-2006-5821 describes a heap-based buffer overflow in the IMA_SECURE_DecryptData1 function within ImaSystem.dll, affecting Citrix MetaFrame XP 1.0/2.0 and Presentation Server 3.0/4.0. This vulnerability allows remote attackers to execute arbitrary code by sending crafted requests with invalid size values to the Independent Management Architecture (IMA) service (ImaSrv.exe), triggering the overflow during decryption. Rated with a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. The EPSS score is low, suggesting a low probability of exploitation in the wild. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a lack of widespread attention or exploitation.