Vulnerability Details CVE-2008-1704
Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.126
EPSS Ranking 93.6%
CVSS Severity
CVSS v2 Score 10.0
References
- http://secunia.com/advisories/29775
- http://www.securityfocus.com/bid/28717
- http://www.securitytracker.com/id?1019826
- http://www.tibco.com/resources/mk/ems_security_advisory_20080409.txt
- http://www.vupen.com/english/advisories/2008/1190/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41761
- http://secunia.com/advisories/29775
- http://www.securityfocus.com/bid/28717
- http://www.securitytracker.com/id?1019826
- http://www.tibco.com/resources/mk/ems_security_advisory_20080409.txt
- http://www.vupen.com/english/advisories/2008/1190/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41761
Products affected by CVE-2008-1704
-
cpe:2.3:a:tibco:enterprise_message_service:-
-
cpe:2.3:a:tibco:enterprise_message_service:4.0.0
-
cpe:2.3:a:tibco:enterprise_message_service:4.1.0
-
cpe:2.3:a:tibco:enterprise_message_service:4.2.0
-
cpe:2.3:a:tibco:enterprise_message_service:4.3.0
-
cpe:2.3:a:tibco:enterprise_message_service:4.4.0
-
cpe:2.3:a:tibco:enterprise_message_service:4.4.1
-
cpe:2.3:a:tibco:iprocess_engine:10.6.0
-
cpe:2.3:a:tibco:iprocess_engine:10.6.1