CVE-2007-5658

Published: Jan 16, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing size and copy-length values that trigger the overflow.

Affected (8)

Products: Tibco: Enterprise Message Service, Rtworks, Smartsockets Rtserver

3 products

Enterprise Message Service

Smartsockets Rtserver

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Tibco Enterprise Message Service	Version 4.0.0
Tibco Enterprise Message Service	Version 4.1.0
Tibco Enterprise Message Service	Version 4.2.0
Tibco Enterprise Message Service	Version 4.3.0
Tibco Enterprise Message Service	Version 4.4.0
Tibco Enterprise Message Service	Version 4.4.1
Tibco Rtworks	Up to 4.0.3
Tibco Smartsockets Rtserver	Up to 6.8.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (20)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=638

Source: cve@mitre.org

http://secunia.com/advisories/28490

Source: cve@mitre.org

http://securitytracker.com/id?1019193

Source: cve@mitre.org

http://www.securityfocus.com/bid/27294

Source: cve@mitre.org

http://www.tibco.com/mk/advisory.jsp

Source: cve@mitre.org

http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt

Source: cve@mitre.org

http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt

Source: cve@mitre.org

http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0173

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/39703

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=638

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28490

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1019193

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/27294

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.tibco.com/mk/advisory.jsp

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0173

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/39703

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.