CVE-2007-5658
Summary
| CVE | CVE-2007-5658 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-01-16 03:00:00 UTC |
| Updated | 2017-07-29 01:33:00 UTC |
| Description | Heap-based buffer overflow in TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing size and copy-length values that trigger the overflow. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Tibco | Enterprise Message Service | 4.0.0 | All | All | All |
| Application | Tibco | Enterprise Message Service | 4.1.0 | All | All | All |
| Application | Tibco | Enterprise Message Service | 4.2.0 | All | All | All |
| Application | Tibco | Enterprise Message Service | 4.3.0 | All | All | All |
| Application | Tibco | Enterprise Message Service | 4.4.0 | All | All | All |
| Application | Tibco | Enterprise Message Service | 4.4.1 | All | All | All |
| Application | Tibco | Enterprise Message Service | 4.0.0 | All | All | All |
| Application | Tibco | Enterprise Message Service | 4.1.0 | All | All | All |
| Application | Tibco | Enterprise Message Service | 4.2.0 | All | All | All |
| Application | Tibco | Enterprise Message Service | 4.3.0 | All | All | All |
| Application | Tibco | Enterprise Message Service | 4.4.0 | All | All | All |
| Application | Tibco | Enterprise Message Service | 4.4.1 | All | All | All |
| Application | Tibco | Rtworks | All | All | All | All |
| Application | Tibco | Smartsockets Rtserver | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 404 Not Found | CONFIRM | www.tibco.com | |
| TIBCO SmartSockets Untrusted Pointer and Pointer Offset Values and Buffer Overflows Let Remote Users Execute Arbitrary Code - SecurityTracker | SECTRACK | securitytracker.com | |
| 404 Not Found | CONFIRM | www.tibco.com | |
| Advisory | TIBCO Software | CONFIRM | www.tibco.com | |
| TIBCO SmartSockets Request Heap Buffer Overflow Vulnerability | BID | www.securityfocus.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| 404 Not Found | CONFIRM | www.tibco.com | |
| 20080115 TIBCO SmartSockets RTserver Heap Overflow Vulnerability | IDEFENSE | labs.idefense.com | |
| TIBCO SmartSockets Multiple Vulnerabilities - Advisories - Secunia | SECUNIA | secunia.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.