CVE-2007-5658

CVE-2007-5658 covers a heap-based buffer overflow in the TIBCO SmartSockets family: RTserver (6.8.0 and earlier), RTworks (before 4.0.4), and EMS (4.0.0–4.4.1). The flaw arises from processing requests that carry attacker-controlled size and copy-length values, triggering a heap overflow and enab...

iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTserver Heap Overflow Vulnerability

iDefense Security Advisory 01.15.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 15, 2008 I. BACKGROUND TIBCO SmartSockets is a message passing framework used to transport messages over disparate channels. The RTserver is the server component of the framework. More information can b...