CVE-2008-7126

Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet with a large string length value to UDP port 14000, which triggers a heap-based buffer overflow.

• CWE-189

• http://aluigi.altervista.org/adv/visibroken-adv.txtExploit
• http://archives.neohapsis.com/archives/fulldisclosure/2008-03/0018.htmlExploit
• http://osvdb.org/43057
• http://secunia.com/advisories/29213Vendor Advisory
• http://www.securityfocus.com/bid/28084Exploit
• http://www.vupen.com/english/advisories/2008/0748/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40978
• http://aluigi.altervista.org/adv/visibroken-adv.txtExploit
• http://archives.neohapsis.com/archives/fulldisclosure/2008-03/0018.htmlExploit
• http://osvdb.org/43057
• http://secunia.com/advisories/29213Vendor Advisory
• http://www.securityfocus.com/bid/28084Exploit
• http://www.vupen.com/english/advisories/2008/0748/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40978

Published

Aug 31, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-7120SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP…
• CVE-2008-7121Cross-site scripting (XSS) vulnerability in Mr. CGI Guy Hot …
• CVE-2008-7122Multiple insecure method vulnerabilities in an ActiveX contr…
• CVE-2008-7123Static code injection vulnerability in admin/configuration/m…
• CVE-2008-7124zKup CMS 2.0 through 2.3 does not require administrative aut…
• CVE-2008-7125pphoto in Ariadne before 2.6 allows remote authenticated use…
• CVE-2008-7127osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03…
• CVE-2008-7128The ssl_parse_client_key_exchange function in XySSL before 0…
• CVE-2008-7129XySSL before 0.9 allows remote attackers to cause a denial o…
• CVE-2008-7130Unspecified vulnerability in DB2 Monitoring Console 2.2.4 an…
• CVE-2008-7131Unspecified vulnerability in DB2 Monitoring Console 2.2.4 an…
• CVE-2008-7132Cross-site scripting (XSS) vulnerability in index.php in Nuk…