cbcvebase.
CVE-2008-3338
published 2008-08-13

CVE-2008-3338: Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent…

PriorityP349critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
4.76%
90.8th percentile
Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message.

Affected

22 ranges
VendorProductVersion rangeFixed in
tibcohawk<= 4.8.0—
tibcohawk——
tibcohawk——
tibcohawk——
tibcoiprocess_engine——
tibcoiprocess_engine——
tibcoiprocess_engine——
tibcoiprocess_engine——
tibcoiprocess_engine——
tibcoiprocess_engine——
tibcoiprocess_engine——
tibcoiprocess_engine——
tibcoiprocess_engine——
tibcoiprocess_engine——
tibcoiprocess_engine——
tibcoiprocess_engine——
tibcoiprocess_engine——
tibcoiprocess_engine——
tibcomainframe_service_tracker<= 1.0—
tibcoruntime_agent<= 5.5.4—
tibcoruntime_agent——
tibcoruntime_agent——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.