CVE-2017-5789

published 2017-10-11

CVE-2017-5789: HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors…

critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. At least in LoadRunner, this is a libxdrutil.dll mxdr_string heap-based buffer overflow.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
hp	loadrunner	<= 12.53	—
hp	performance_center	<= 12.53	—

CWE-119