overflowing with security goodness

Register | Login

FilesNewsUsersAuthors

Home Files News About Contact Add New

Showing 1 - 1 of 1

Files

iDEFENSE Security Advisory 2008-01-15.1

Posted Jan 16, 2008

Authored by iDefense Labs, McSlibin | Site idefense.com

iDefense Security Advisory 01.15.08 - Remote exploitation of a heap overflow vulnerability in TIBCO Software Inc.'s SmartSockets RTserver may allow an attacker to crash the service or execute arbitrary code with SYSTEM privileges. A heap overflow vulnerability exists within the code responsible for processing requests. Two distinct values from the request are used for the allocation size and the amount of data copied. Since both values are attacker controlled, this can lead to a heap overflow, potentially resulting in the execution of arbitrary code. iDefense has confirmed the existence of this vulnerability in TIBCO SmartSockets version 6.8.0. Previous versions may also be affected.

tags | advisory, remote, overflow, arbitrary

advisories | CVE-2007-5658

MD5 | a8dbf1e1da5a2a7f6a24e4e845e4d23c

Download | Favorite | Comments (0)