Lucene search

MitreCVE-2007-5546

HistoryOct 18, 2007 - 8:17 p.m.

CVE-2007-5546

2007-10-1820:17:00

CWE-119

mitre

web.nvd.nist.gov

cve-2007-5546

information security

buffer overflow

tibco smartpgm fx

denial of service

remote code execution

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.072

Percentile

94.1%

JSON

Multiple stack-based buffer overflows in TIBCO SmartPGM FX allow remote attackers to execute arbitrary code or cause a denial of service (service stop and file-transfer outage) via unspecified vectors. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.

Affected configurations

Nvd

Node

tibcosmart_pgm_fx

VendorProductVersionCPE
tibcosmart_pgm_fx*cpe:2.3:a:tibco:smart_pgm_fx:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tibco	smart_pgm_fx	*	cpe:2.3:a:tibco:smart_pgm_fx::::::::

References

osvdb.org/45277

securityreason.com/securityalert/3249

www.irmplc.com/index.php/111-Vendor-Alerts

www.securityfocus.com/archive/1/482353/100/0/threaded

www.securityfocus.com/bid/26092

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.072

Percentile

94.1%

JSON

Related for CVE-2007-5546