CVE-2008-3338 - CVE House
Back to Database
Status published Critical CVE-2008-3338

Multiple buffer overflows in TIBCO Hawk (1) AMI C library...

Vulnerability Description

Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-3338

Credits & Attribution

No credits recorded in the NVD database.

References

More from tibco

View All →
CVE-2018-12409
The SOAP Admin API component of TIBCO Software Inc.'s TIBCO...
Medium 6.1
CVE-2016-3628
Buffer overflow in tibemsd in the server in TIBCO Enterprise...
High 8.8
CVE-2015-8090
The Web Server component in TIBCO LogLogic Unity before 1.1.1...
Medium 4
CVE-2015-5713
Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire...
Medium 5
CVE-2015-5712
Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire...
Medium 4

Affected Vendor

Affected Software

hawk, iprocess engine, mainframe service tracker, runtime agent
Vulnerable Versions:
0, 4.6.0, 4.6.1, 4.7, 10.3.0, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5, 10.4, 10.4.1, 10.5, 10.6, 10.6.0, 10.6.1, 10.6.2, 11.0, 5.3, 5.4.0

Timeline

Official Publish: August 13th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.