Description
TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted requests that control loop operations related to memory.
References
- http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt
- 28490 third-party-advisory
- 1019193 vdb-entry
- 20080115 TIBCO SmartSockets RTServer Multiple Untrusted Loop Bounds Vulnerabilities third-party-advisory
- http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt
- http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt
- tibco-rtserver-loop-code-execution(39708) vdb-entry
- http://www.tibco.com/mk/advisory.jsp
- 27293 vdb-entry
- ADV-2008-0173 vdb-entry