CyberSec.Space Logo
返回 CVE 浏览器

CVE-2007-5657

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1390%
EPSS Percentile17.74th
Published2008年1月16日
Last Modified2026年4月23日

Vulnerability Description

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing values that are used as pointer offsets.

Affected Platforms (CPE)

📦
Tibco

Rtworks

<= 4.0.3
📦
Tibco

Smartsockets Rtserver

<= 6.8.0
📦
Tibco

Enterprise Message Service

All versions

References & Advisories

🔗 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=640
🔗 http://secunia.com/advisories/28490
🔗 http://securitytracker.com/id?1019193
🔗 http://www.securityfocus.com/bid/27295
🔗 http://www.tibco.com/mk/advisory.jsp
🔗 http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt
🔗 http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt
🔗 http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt

相关漏洞威胁

CVE-2009-129110.0

Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family (aka RTworks) before 4.0.5, and Enterp...

CVE-2007-565510.0

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allo...

CVE-2007-565610.0

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allo...

CVE-2007-565810.0

Heap-based buffer overflow in TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service ...