CVE-2017-5789 HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. At least in LoadRunner, this is a libxdrut...
CriticalCVSS 9.8
EPSS 17.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. At least in LoadRunner, this is a libxdrutil.dll mxdr_string heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc loadrunner | <= 12.53 | No fix listed |
| HP Inc performance center | <= 12.53 | No fix listed |
References
- 101224 third-party-advisory vdb-entry
- 96774 third-party-advisory vdb-entry
- 1038028 third-party-advisory vdb-entry
- 1038029 third-party-advisory vdb-entry
- www.zerodayinitiative.com third-party-advisory vdb-entry
- h20566.www2.hpe.com vendor-advisory
- www.tenable.com third-party-advisory