CVE-2007-5656: TIBCO Enterprise Message Service

High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days.

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted requests that control loop operations related to memory.

Affected products

• TIBCO Enterprise Message Service: version 4.0.0 only; version 4.1.0 only; version 4.2.0 only; version 4.3.0 only; version 4.4.0 only; version 4.4.1 only
• TIBCO Rtworks: up to and including 4.0.3
• TIBCO Smartsockets Rtserver: up to and including 6.8.0

Published 2008-01-16. Last modified 2026-06-16.