Vulnerabilities > Tibco > Critical

DATE CVE VULNERABILITY TITLE RISK
2008-01-16 CVE-2007-5657 Improper Input Validation vulnerability in Tibco products
TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing values that are used as pointer offsets.
network
low complexity
tibco CWE-20
critical
10.0
2008-01-16 CVE-2007-5656 Resource Management Errors vulnerability in Tibco products
TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted requests that control loop operations related to memory.
network
low complexity
tibco CWE-399
critical
10.0
2008-01-16 CVE-2007-5655 Buffer Errors vulnerability in Tibco products
TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing values that are used as pointers.
network
low complexity
tibco CWE-119
critical
10.0
2007-10-18 CVE-2007-5546 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Tibco Smart PGM FX
Multiple stack-based buffer overflows in TIBCO SmartPGM FX allow remote attackers to execute arbitrary code or cause a denial of service (service stop and file-transfer outage) via unspecified vectors.
network
tibco CWE-119
critical
9.3