CVE-2006-6334

CVE-2006-6334 describes a heap-based buffer overflow vulnerability in the wfica.ocx ActiveX control within Citrix Presentation Server Client versions prior to 9.230 for Windows. This flaw allows remote malicious websites to execute arbitrary code by manipulating the DataSize parameter to be less than the actual Data buffer length. The vulnerability has a CVSS score of 6.8, indicating a medium severity with a network attack vector, medium attack complexity, and potential for partial confidentiality, integrity, and availability impact. While not listed in CISA's KEV catalog, public exploit code exists on ExploitDB (EDB-5106), though there is no evidence of active exploitation, Metasploit/Nuclei modules, or significant community discussion or media coverage.