iDEFENSE Security Advisory 12.16.05 – Remote exploitation of a heap overflow vulnerability in Citrix, Inc.’s Program Neighborhood allows attackers to execute arbitrary code. The vulnerability specifically exists due to insufficient handling of corrupt Application Set responses. A heap-based buffer overflow will occur when the Citrix Program Neighborhood client receives an Application Set response containing a name value over 286 bytes. iDefense has confirmed the existence of this vulnerability in Citrix Presentation Server Client 9.0. All prior versions are suspected vulnerable.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/42523/12.16.05.txt
Source: https://packetstormsecurity.com/files/42523/iDEFENSE-Security-Advisory-2005-12-16.t.html