CVE-2007-5657

Related Files

iDEFENSE Security Advisory 2008-01-15.3

Posted Jan 16, 2008

Authored by iDefense Labs, Sean Larsson, McSlibin | Site idefense.com

iDefense Security Advisory 01.15.08 - Remote exploitation of multiple untrusted pointer offset vulnerabilities in TIBCO Software Inc.'s SmartSockets RTserver may allow an attacker to crash the service or execute arbitrary code with SYSTEM privileges. When processing requests, SmartSockets uses values from the requests as offsets added to valid pointers. The resulting pointer values are then used in various memory operations. Since attackers can control these offset values, potentially exploitable conditions arise. iDefense has confirmed the existence of these vulnerabilities in TIBCO SmartSockets version 6.8.0. Previous versions may also be affected.

tags | advisory, remote, arbitrary, vulnerability

advisories | CVE-2007-5657

SHA-256 | 0d4e1180975b5622df56fb55155580852ab845d3afcc3f51f3a7d74e8eddf4ee

Download | Favorite | View