CVE-2008-3338

Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2008-08-13

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Hawk (Tibco)
• Iprocess Engine (Tibco)
• Mainframe Service Tracker (Tibco)
• Runtime Agent (Tibco)

References

• http://secunia.com/advisories/31618
• http://www.securityfocus.com/bid/30836
• http://www.tibco.com/resources/mk/hawk_security_advisory_20080729.txt
• http://www.vupen.com/english/advisories/2008/2448
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44604