Description
osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) via a crafted packet with a large string length value to UDP port 14000, which triggers a memory allocation failure that is not properly handled.
References
- http://aluigi.altervista.org/adv/visibroken-adv.txt
- 20080303 Heap overflow in Borland VisiBroker Smart Agent 08.00.00.C1.03 mailing-list
- visibroker-smartagent-dos(40983) vdb-entry
- 43058 vdb-entry
- 29213 third-party-advisory
- ADV-2008-0748 vdb-entry
- 28084 vdb-entry