CVE-2008-1704 Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted mes...
HighCVSS 10.0
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco enterprise message service | <= 4.4.2 | No fix listed |
| tibco enterprise message service | = 4.0.0 | No fix listed |
| tibco enterprise message service | = 4.1.0 | No fix listed |
| tibco enterprise message service | = 4.2.0 | No fix listed |
| tibco enterprise message service | = 4.3.0 | No fix listed |
| tibco enterprise message service | = 4.4.0 | No fix listed |
| tibco enterprise message service | = 4.4.1 | No fix listed |
| tibco iprocess engine | = 10.6.0 | No fix listed |
| tibco iprocess engine | = 10.6.1 | No fix listed |
References
- 29775 third-party-advisory vendor-advisory
- 28717 vdb-entry
- 1019826 vdb-entry
- www.tibco.com
- ADV-2008-1190 vdb-entry
- tibco-ems-iprocess-code-execution(41761) vdb-entry