Buffer overflow in Tibco Hawk
CVE-2008-3338
Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message.
Vulnerability class: Buffer Overflow
EPSS: 0.048 (91.0th percentile) — read the EPSS interpretation.
Affected products
- Tibco Hawk — versions 4.6.0, 4.6.1, 4.7
- Tibco Iprocess_engine — versions 10.3.0, 10.3.1, 10.3.2
- Tibco Mainframe_service_tracker
- Tibco Runtime_agent — versions 5.3, 5.4.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM)