CVE-2007-5656 : TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterpr

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted requests that control loop operations related to memory.

Published 2008-01-16 03:00:00

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute codeDenial of service

Products affected by CVE-2007-5656

Tibco » Rtworks
Versions up to, including, (<=) 4.0.3
cpe:2.3:a:tibco:rtworks:*:*:*:*:*:*:*:*
Matching versions
Tibco » Smartsockets Rtserver
Versions up to, including, (<=) 6.8.0
cpe:2.3:a:tibco:smartsockets_rtserver:*:*:*:*:*:*:*:*
Matching versions
Tibco » Enterprise Message Service » Version: 4.3.0
cpe:2.3:a:tibco:enterprise_message_service:4.3.0:*:*:*:*:*:*:*
Matching versions
Tibco » Enterprise Message Service » Version: 4.4.0
cpe:2.3:a:tibco:enterprise_message_service:4.4.0:*:*:*:*:*:*:*
Matching versions
Tibco » Enterprise Message Service » Version: 4.4.1
cpe:2.3:a:tibco:enterprise_message_service:4.4.1:*:*:*:*:*:*:*
Matching versions
Tibco » Enterprise Message Service » Version: 4.0.0
cpe:2.3:a:tibco:enterprise_message_service:4.0.0:*:*:*:*:*:*:*
Matching versions
Tibco » Enterprise Message Service » Version: 4.1.0
cpe:2.3:a:tibco:enterprise_message_service:4.1.0:*:*:*:*:*:*:*
Matching versions
Tibco » Enterprise Message Service » Version: 4.2.0
cpe:2.3:a:tibco:enterprise_message_service:4.2.0:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-5656

EPSS FAQ

11.21%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 93 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-5656

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2007-5656

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-5656

Jump to

Vulnerability Details : CVE-2007-5656

Products affected by CVE-2007-5656

Exploit prediction scoring system (EPSS) score for CVE-2007-5656

CVSS scores for CVE-2007-5656

CWE ids for CVE-2007-5656

References for CVE-2007-5656