CVSS: 5.0EPSS: 3%CPEs: 1EXPL: 4CVE-2008-7127
https://notcve.org/view.php?id=CVE-2008-7127
osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) via a crafted packet with a large string length value to UDP port 14000, which triggers a memory allocation failure that is not properly handled. osagent.exe en Borland VisiBroker Smart Agent v08.00.00.C1.03 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) a través de una paquete manipulado con una logitus de cadena larga al puerto UDP 14000, lo que provoca una fallo de localización de memoria que no se gestiona de forma adecuada. • http://aluigi.altervista.org/adv/visibroken-adv.txt http://archives.neohapsis.com/archives/fulldisclosure/2008-03/0018.html http://osvdb.org/43058 http://secunia.com/advisories/29213 http://www.securityfocus.com/bid/28084 http://www.vupen.com/english/advisories/2008/0748/references https://exchange.xforce.ibmcloud.com/vulnerabilities/40983 • CWE-399: Resource Management Errors •
CVSS: 10.0EPSS: 10%CPEs: 1EXPL: 4CVE-2008-7126 – Borland VisiBroker Smart Agent 08.00.00.C1.03 - Multiple Remote Vulnerabilities
https://notcve.org/view.php?id=CVE-2008-7126
Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet with a large string length value to UDP port 14000, which triggers a heap-based buffer overflow. Desbordamiento de entero en osagent.exe en Borland VisiBroker Smart Agent 08.00.00.C1.03 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente la ejecución de código de su elección a través de un paquete manipulado un valor de longitud de cadena larga al puerto UDP 14000 que provoca un desbordamiento de búfer basado en memoria dinámica (heap). • https://www.exploit-db.com/exploits/31330 http://aluigi.altervista.org/adv/visibroken-adv.txt http://archives.neohapsis.com/archives/fulldisclosure/2008-03/0018.html http://osvdb.org/43057 http://secunia.com/advisories/29213 http://www.securityfocus.com/bid/28084 http://www.vupen.com/english/advisories/2008/0748/references https://exchange.xforce.ibmcloud.com/vulnerabilities/40978 • CWE-189: Numeric Errors •