CVE-2008-1704
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server.
Múltiples desbordamientos de bufer en TIBCO Software Enterprise Message Service (EMS) anterior a 4.4.3, y iProcess Engine 10.6.0 a 10.6.1, permite a atacantes remotos ejecutar código de su elección mediante un mensaje manipulado a el servidor EMS.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2008-04-08 CVE Reserved
- 2008-04-11 CVE Published
- 2024-08-07 CVE Updated
- 2024-09-13 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/28717 | Vdb Entry | |
| http://www.securitytracker.com/id?1019826 | Vdb Entry | |
| http://www.tibco.com/resources/mk/ems_security_advisory_20080409.txt | X_refsource_confirm | |
| http://www.vupen.com/english/advisories/2008/1190/references | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/41761 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/29775 | 2017-08-08 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Tibco Search vendor "Tibco" | Enterprise Message Service Search vendor "Tibco" for product "Enterprise Message Service" | <= 4.4.2 Search vendor "Tibco" for product "Enterprise Message Service" and version " <= 4.4.2" | - |
Affected
| ||||||
| Tibco Search vendor "Tibco" | Enterprise Message Service Search vendor "Tibco" for product "Enterprise Message Service" | 4.0.0 Search vendor "Tibco" for product "Enterprise Message Service" and version "4.0.0" | - |
Affected
| ||||||
| Tibco Search vendor "Tibco" | Enterprise Message Service Search vendor "Tibco" for product "Enterprise Message Service" | 4.1.0 Search vendor "Tibco" for product "Enterprise Message Service" and version "4.1.0" | - |
Affected
| ||||||
| Tibco Search vendor "Tibco" | Enterprise Message Service Search vendor "Tibco" for product "Enterprise Message Service" | 4.2.0 Search vendor "Tibco" for product "Enterprise Message Service" and version "4.2.0" | - |
Affected
| ||||||
| Tibco Search vendor "Tibco" | Enterprise Message Service Search vendor "Tibco" for product "Enterprise Message Service" | 4.3.0 Search vendor "Tibco" for product "Enterprise Message Service" and version "4.3.0" | - |
Affected
| ||||||
| Tibco Search vendor "Tibco" | Enterprise Message Service Search vendor "Tibco" for product "Enterprise Message Service" | 4.4.0 Search vendor "Tibco" for product "Enterprise Message Service" and version "4.4.0" | - |
Affected
| ||||||
| Tibco Search vendor "Tibco" | Enterprise Message Service Search vendor "Tibco" for product "Enterprise Message Service" | 4.4.1 Search vendor "Tibco" for product "Enterprise Message Service" and version "4.4.1" | - |
Affected
| ||||||
| Tibco Search vendor "Tibco" | Iprocess Engine Search vendor "Tibco" for product "Iprocess Engine" | 10.6.0 Search vendor "Tibco" for product "Iprocess Engine" and version "10.6.0" | - |
Affected
| ||||||
| Tibco Search vendor "Tibco" | Iprocess Engine Search vendor "Tibco" for product "Iprocess Engine" | 10.6.1 Search vendor "Tibco" for product "Iprocess Engine" and version "10.6.1" | - |
Affected
| ||||||