Remote code execution vulnerability in multiple TIBCO Spotfire Products

Release date:
Updated on:

Affected Systems:
TIBCO Spotfire
Description:
--------------------------------------------------------------------------------
CVE (CAN) ID: CVE-2014-2544
 
TIBCO Spotfire is a smart analysis software for business data.
 
TIBCO Spotfire Server 3.3.3 and earlier versions, 4.5.0, 5.0.0, 5.0.1, 5.5.0, 6.0.0, 6.0.1, TIBCO Spotfire Professional, web Player, Automation Services, Deployment Kit 4.0.3 and earlier versions, 4.5.0, 4.5.1, 5.0.0, 5.0.1, 5.5.0, and 6.0.0 have security vulnerabilities, attackers can exploit this vulnerability to execute arbitrary code.
 
<* Source: vendor

Link: http://secunia.com/advisories/57821/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
TIBCO
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://spotfire.tibco.com/discover-spotfire
 
Http://www.tibco.com/services/support/advisories/spotfire-advisory_20140409.jsp
Http://www.tibco.com/multimedia/spotfire_advisory_20140409_tcm8-20764.txt