CVEvulnerability

CVE-2007-5658

10.0 HIGH Published 2008-01-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-01-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Heap-based buffer overflow in TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing size and copy-length values that trigger the overflow.

Affected configurations

• tibco enterprise message service 4.0.0 • tibco enterprise message service 4.1.0 • tibco enterprise message service 4.2.0 • tibco enterprise message service 4.3.0 • tibco enterprise message service 4.4.0 • tibco enterprise message service 4.4.1 • tibco rtworks (<= 4.0.3) • tibco smartsockets rtserver (<= 6.8.0)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References