critical10.0
CVE-2008-1704
Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to…
Impact
Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tibco | Enterprise Message Service | through 4.4.2 Versions 4.0.0, 4.1.0, 4.2.0, 4.3.0, 4.4.0 |
| Tibco | Iprocess Engine | Versions 10.6.0, 10.6.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/29775
- http://www.securityfocus.com/bid/28717
- http://www.securitytracker.com/id?1019826
- http://www.tibco.com/resources/mk/ems_security_advisory_20080409.txt
- http://www.vupen.com/english/advisories/2008/1190/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41761
- http://secunia.com/advisories/29775
- http://www.securityfocus.com/bid/28717
- http://www.securitytracker.com/id?1019826
- http://www.tibco.com/resources/mk/ems_security_advisory_20080409.txt
- http://www.vupen.com/english/advisories/2008/1190/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41761