TIBCO Hawk Multiple Remote Buffer Overflow Vulnerabilities

TIBCO Hawk Multiple Remote Buffer Overflow Vulnerabilities

TIBCO Hawk is prone to multiple buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit these issues to execute arbitrary code in the context of affected applications. Failed exploit attempts will likely result in denial-of-service conditions.

The following products and components are affected:

TIBCO Hawk prior to 4.8.1
TIBCO Runtime Agent (TRA) prior to 5.6.0
TIBCO iProcess Engine 10.3.0 through 10.6.2, and 11.0.0
TIBCO Mainframe Service Tracker prior to 1.1.0