iDefense Security Advisory 01.15.08 – Remote exploitation of multiple untrusted loop bounds vulnerabilities in TIBCO Software Inc.’s SmartSockets RTserver may allow an attacker to crash the service or execute arbitrary code with SYSTEM privileges. When processing requests, SmartSockets uses values from the requests to control the number of iterations of several loops. Inside these loops, various memory operations are performed. Since attackers can control these values, potentially exploitable conditions arise. iDefense has confirmed the existence of these vulnerabilities in TIBCO SmartSockets version 6.8.0. Previous versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/62672/01.15.08-4.txt
Source: https://packetstormsecurity.com/files/62672/iDEFENSE-Security-Advisory-2008-01-15.4.html