CVE-2007-5656

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted requests that control loop operations related to memory.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2008-01-16

Last modified

2024-08-07

Weaknesses

CWE-399

Affected products

• Enterprise Message Service (Tibco)
• Rtworks (Tibco)
• Smartsockets Rtserver (Tibco)

References

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=641
• http://secunia.com/advisories/28490
• http://securitytracker.com/id?1019193
• http://www.securityfocus.com/bid/27293
• http://www.tibco.com/mk/advisory.jsp
• http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt
• http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt
• http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt
• http://www.vupen.com/english/advisories/2008/0173
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39708