CVE-2008-3338

EPSS 4.76%
Veröffentlicht 13.08.2008 22:41:00
Zuletzt bearbeitet 16.06.2026 22:55:38
Erkennungen
Login

Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 8

NVD 22 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Tibco ≫ Hawk Version <= 4.8.0

Tibco ≫ Hawk Version 4.6.0

Tibco ≫ Hawk Version 4.6.1

Tibco ≫ Hawk Version 4.7

Tibco ≫ Iprocess Engine Version 10.3.0

Tibco ≫ Iprocess Engine Version 10.3.1

Tibco ≫ Iprocess Engine Version 10.3.2

Tibco ≫ Iprocess Engine Version 10.3.3

Tibco ≫ Iprocess Engine Version 10.3.4

Tibco ≫ Iprocess Engine Version 10.3.5

Tibco ≫ Iprocess Engine Version 10.4

Tibco ≫ Iprocess Engine Version 10.4.1

Tibco ≫ Iprocess Engine Version 10.5

Tibco ≫ Iprocess Engine Version 10.6

Tibco ≫ Iprocess Engine Version 10.6.0

Tibco ≫ Iprocess Engine Version 10.6.1

Tibco ≫ Iprocess Engine Version 10.6.2

Tibco ≫ Iprocess Engine Version 11.0

Tibco ≫ Mainframe Service Tracker Version <= 1.0

Tibco ≫ Runtime Agent Version <= 5.5.4

Tibco ≫ Runtime Agent Version 5.3

Tibco ≫ Runtime Agent Version 5.4.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.76%	0.907

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/31618

http://www.securityfocus.com/bid/30836

http://www.tibco.com/resources/mk/hawk_security_advisory_20080729.txt

http://www.vupen.com/english/advisories/2008/2448

https://exchange.xforce.ibmcloud.com/vulnerabilities/44604

https://nvd.nist.gov/vuln/detail/CVE-2008-3338

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-3338

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-3338

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-3338