Description
Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server.
References
- http://www.tibco.com/resources/mk/ems_security_advisory_20080409.txt
- 1019826 vdb-entry
- tibco-ems-iprocess-code-execution(41761) vdb-entry
- 28717 vdb-entry
- ADV-2008-1190 vdb-entry
- 29775 third-party-advisory