iDefense Security Advisory 01.15.08 – Remote exploitation of a heap overflow vulnerability in TIBCO Software Inc.’s SmartSockets RTserver may allow an attacker to crash the service or execute arbitrary code with SYSTEM privileges. A heap overflow vulnerability exists within the code responsible for processing requests. Two distinct values from the request are used for the allocation size and the amount of data copied. Since both values are attacker controlled, this can lead to a heap overflow, potentially resulting in the execution of arbitrary code. iDefense has confirmed the existence of this vulnerability in TIBCO SmartSockets version 6.8.0. Previous versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/62669/01.15.08-1.txt
Source: https://packetstormsecurity.com/files/62669/iDEFENSE-Security-Advisory-2008-01-15.1.html