critical10.0
CVE-2008-3338
Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA…
Impact
Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tibco | Hawk | through 4.8.0 Versions 4.6.0, 4.6.1, 4.7 |
| Tibco | Iprocess Engine | Versions 10.3.0, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5 |
| Tibco | Mainframe Service Tracker | through 1.0 |
| Tibco | Runtime Agent | through 5.5.4 Versions 5.3, 5.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/31618
- http://www.securityfocus.com/bid/30836
- http://www.tibco.com/resources/mk/hawk_security_advisory_20080729.txt
- http://www.vupen.com/english/advisories/2008/2448
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44604
- http://secunia.com/advisories/31618
- http://www.securityfocus.com/bid/30836
- http://www.tibco.com/resources/mk/hawk_security_advisory_20080729.txt
- http://www.vupen.com/english/advisories/2008/2448
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44604