CVE-2007-5658

Currently unrated

Key Information:

Vendor
Tibco
Status
Enterprise Message Service
Smartsockets Rtserver
Rtworks
Vendor
CVE Published:
16 January 2008

Summary

Heap-based buffer overflow in TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing size and copy-length values that trigger the overflow.

References

http://www.securityfocus.com/bid/27294
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/39703
vdb-entryx_refsource_XF
http://www.tibco.com/resources/mk/ems_security_advisory_2...
x_refsource_CONFIRM

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.