CVEvulnerability

CVE-2007-5657

10.0 HIGH Published 2008-01-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-01-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing values that are used as pointer offsets.

Affected configurations

• tibco rtworks (<= 4.0.3) • tibco smartsockets rtserver (<= 6.8.0) • tibco enterprise message service

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

Referenced by CWE · observed example (1)

  • CWE-823 Use of Out-of-range Pointer Offset weakness

References