CVE-2008-3338: TIBCO Hawk

High severity, CVSS 10.0. EPSS: 4.8% chance of exploitation in the next 30 days.

Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message.

Affected products

• TIBCO Hawk: up to and including 4.8.0; version 4.6.0 only; version 4.6.1 only; version 4.7 only
• TIBCO Iprocess Engine: version 10.3.0 only; version 10.3.1 only; version 10.3.2 only; version 10.3.3 only; version 10.3.4 only; version 10.3.5 only; …
• TIBCO Mainframe Service Tracker: up to and including 1.0
• TIBCO Runtime Agent: up to and including 5.5.4; version 5.3 only; version 5.4.0 only

Published 2008-08-13. Last modified 2026-06-16.