CVE-2008-1704

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-04-11 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server.

Affected products

TIBCO Enterprise Message Service: through 4.4.2; 4.0.0, 4.1.0, 4.2.0, 4.3.0, 4.4.0, 4.4.1
TIBCO Iprocess Engine: 10.6.0, 10.6.1

References

http://secunia.com/advisories/29775
http://www.securityfocus.com/bid/28717
http://www.securitytracker.com/id?1019826
http://www.tibco.com/resources/mk/ems_security_advisory_20080409.txt
http://www.vupen.com/english/advisories/2008/1190/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41761
http://secunia.com/advisories/29775
http://www.securityfocus.com/bid/28717
http://www.securitytracker.com/id?1019826
http://www.tibco.com/resources/mk/ems_security_advisory_20080409.txt
http://www.vupen.com/english/advisories/2008/1190/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41761

Get alerted when CVE-2008-1704 or the next vulnerability affects your stack