CVE-2008-1704: TIBCO Enterprise Message Service

High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days.

Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server.

Affected products

• TIBCO Enterprise Message Service: up to and including 4.4.2; version 4.0.0 only; version 4.1.0 only; version 4.2.0 only; version 4.3.0 only; version 4.4.0 only; …
• TIBCO Iprocess Engine: version 10.6.0 only; version 10.6.1 only

Published 2008-04-11. Last modified 2026-06-16.