CVE-2007-5656

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-01-16 · updated 2026-06-16
Weakness: CWE-399

Description

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted requests that control loop operations related to memory.

Affected products

TIBCO Enterprise Message Service: 4.0.0, 4.1.0, 4.2.0, 4.3.0, 4.4.0, 4.4.1
TIBCO Rtworks: through 4.0.3
TIBCO Smartsockets Rtserver: through 6.8.0

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=641
http://secunia.com/advisories/28490
http://securitytracker.com/id?1019193
http://www.securityfocus.com/bid/27293
http://www.tibco.com/mk/advisory.jsp
http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt
http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt
http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt
http://www.vupen.com/english/advisories/2008/0173
https://exchange.xforce.ibmcloud.com/vulnerabilities/39708
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=641
http://secunia.com/advisories/28490

Get alerted when CVE-2007-5656 or the next vulnerability affects your stack