CVE-2008-7126 Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a craf...
HighCVSS 10.0
EPSS 10.0%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet with a large string length value to UDP port 14000, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microfocus visibroker | <= 08.00.00.c1.03 | No fix listed |
References
- aluigi.altervista.org exploit
- 20080303 Heap overflow in Borland VisiBroker Smart Agent 08.00.00.C1.03 exploit mailing-list
- 43057 vdb-entry
- 29213 third-party-advisory vendor-advisory
- 28084 exploit vdb-entry
- ADV-2008-0748 vdb-entry vendor-advisory
- visibroker-osagent-bo(40978) vdb-entry