Heap-based Buffer Overflow in TIBCO SmartSockets and EMS
CVE-2007-5658

Currently unrated

Key Information:

Vendor
Tibco
Status
Enterprise Message Service
Smartsockets Rtserver
Rtworks
Vendor
CVE Published:
16 January 2008

Summary

A heap-based buffer overflow vulnerability exists in TIBCO SmartSockets RTserver versions 6.8.0 and earlier, RTworks prior to 4.0.4, and Enterprise Message Service (EMS) versions 4.0.0 through 4.4.1. This flaw enables remote attackers to craft specially designed requests with manipulated size and copy-length values, potentially allowing for the execution of arbitrary code on the targeted systems. The exploitation of this vulnerability can lead to severe security implications, including unauthorized access and system compromise.

References

http://www.securityfocus.com/bid/27294
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/39703
vdb-entryx_refsource_XF
http://www.tibco.com/resources/mk/ems_security_advisory_2...
x_refsource_CONFIRM

EPSS Score

16% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.