CVE-2008-7126

Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet with a large string length value to UDP port 14000, which triggers a heap-based buffer overflow.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

10.01% chance of exploitation in the next 30 days, 96th percentile

Published

2009-08-31

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/31330

Security advisories

• http://secunia.com/advisories/29213
• http://www.vupen.com/english/advisories/2008/0748/references
• http://www.securityfocus.com/bid/28084

References

• CVE Record
• NVD entry