TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted requests that control loop operations related to memory.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_message_service | Tibco | 4.0.0 (including) | 4.0.0 (including) |
| Enterprise_message_service | Tibco | 4.1.0 (including) | 4.1.0 (including) |
| Enterprise_message_service | Tibco | 4.2.0 (including) | 4.2.0 (including) |
| Enterprise_message_service | Tibco | 4.3.0 (including) | 4.3.0 (including) |
| Enterprise_message_service | Tibco | 4.4.0 (including) | 4.4.0 (including) |
| Enterprise_message_service | Tibco | 4.4.1 (including) | 4.4.1 (including) |
| Rtworks | Tibco | * | 4.0.3 (including) |
| Smartsockets_rtserver | Tibco | * | 6.8.0 (including) |