CVE-2008-7126

2009-08-3110:00:00

mitre

www.cve.org

8.1 High

AI Score

Confidence

High

0.1 Low

EPSS

Percentile

94.9%

JSON

Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet with a large string length value to UDP port 14000, which triggers a heap-based buffer overflow.

References

aluigi.altervista.org/adv/visibroken-adv.txt

archives.neohapsis.com/archives/fulldisclosure/2008-03/0018.html

osvdb.org/43057

secunia.com/advisories/29213

www.securityfocus.com/bid/28084

www.vupen.com/english/advisories/2008/0748/references

exchange.xforce.ibmcloud.com/vulnerabilities/40978