CVE-2007-5657

KRITISCH 10.0CVE-2007-5657 · Published 16/01/2008 · updated 16/06/2026

Kurz gesagt

CVE-2007-5657 ist eine Schwachstelle (KRITISCH (CVSS 10.0)) in rtworks (tibco), smartsockets rtserver (tibco).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 5.5%, höher als bei 92.8% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
rtworks tibco	`≤ 4.0.3`	No fix yet
smartsockets rtserver tibco	`≤ 6.8.0`	No fix yet

Description

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing values that are used as pointer offsets.

References

labs.idefense.com/intelligence/vulnerabilities/display.php
secunia.com/advisories/28490
securitytracker.com/id
securityfocus.com/bid/27295
tibco.com/mk/advisory.jsp
tibco.com/resources/mk/ems_security_advisory_20080115.txt
tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt
tibco.com/resources/mk/sspfm_security_advisory_20080115.txt
vupen.com/english/advisories/2008/0173
exchange.xforce.ibmcloud.com/vulnerabilities/39707

Weitere Schwachstellen in rtworks

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free