Description
TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing values that are used as pointers.
References
- http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt
- 20080115 TIBCO SmartSockets RTServer Multiple Untrusted Pointer Vulnerabilities third-party-advisory
- 28490 third-party-advisory
- 27292 vdb-entry
- 1019193 vdb-entry
- http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt
- tibco-rtserver-pointer-code-execution(39705) vdb-entry
- http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt
- http://www.tibco.com/mk/advisory.jsp
- ADV-2008-0173 vdb-entry