CVE-2007-5655

Related Files

iDEFENSE Security Advisory 2008-01-15.2

Posted Jan 16, 2008

Authored by iDefense Labs, Sean Larsson, McSlibin | Site idefense.com

iDefense Security Advisory 01.15.08 - Remote exploitation of multiple untrusted pointer vulnerabilities in TIBCO Software Inc.'s SmartSockets RTserver may allow an attacker to crash the service or execute arbitrary code with SYSTEM privileges. When processing requests, SmartSockets uses values from the requests as pointers. These pointer values are then used in various memory operations. Since attackers can control these values, potentially exploitable conditions arise. iDefense has confirmed the existence of these vulnerabilities in TIBCO SmartSockets version 6.8.0. Previous versions may also be affected.

tags | advisory, remote, arbitrary, vulnerability

advisories | CVE-2007-5655

SHA-256 | 3786ba1f2c0d443c5ba142c9250af385bc9b7d612652583004e74f0b46076165

Download | Favorite | View