CVE-2008-3338 Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 th...
HighCVSS 10.0
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco hawk | <= 4.8.0 | No fix listed |
| tibco hawk | = 4.6.0 | No fix listed |
| tibco hawk | = 4.6.1 | No fix listed |
| tibco hawk | = 4.7 | No fix listed |
| tibco iprocess engine | = 10.3.0 | No fix listed |
| tibco iprocess engine | = 10.3.1 | No fix listed |
| tibco iprocess engine | = 10.3.2 | No fix listed |
| tibco iprocess engine | = 10.3.3 | No fix listed |
| tibco iprocess engine | = 10.3.4 | No fix listed |
| tibco iprocess engine | = 10.3.5 | No fix listed |
| tibco iprocess engine | = 10.4 | No fix listed |
| tibco iprocess engine | = 10.4.1 | No fix listed |
| tibco iprocess engine | = 10.5 | No fix listed |
| tibco iprocess engine | = 10.6 | No fix listed |
| tibco iprocess engine | = 10.6.0 | No fix listed |
| tibco iprocess engine | = 10.6.1 | No fix listed |
| tibco iprocess engine | = 10.6.2 | No fix listed |
| tibco iprocess engine | = 11.0 | No fix listed |
| tibco mainframe service tracker | <= 1.0 | No fix listed |
| tibco runtime agent | <= 5.5.4 | No fix listed |
| tibco runtime agent | = 5.3 | No fix listed |
| tibco runtime agent | = 5.4.0 | No fix listed |
References
- 31618 third-party-advisory
- 30836 vdb-entry
- www.tibco.com
- ADV-2008-2448 vdb-entry
- tibcohawk-amiclibrary-hawkhma-bo(44604) vdb-entry