CVE-2017-5789

CWE-119 — Buffer Overflow3 documents3 sources
Severity
9.8CRITICAL
EPSS
33.9%
top 3.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
HP LoadrunnerHP Performance Center
Timeline
PublishedOct 11
Latest updateMay 13

Description

HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. At least in LoadRunner, this is a libxdrutil.dll mxdr_string heap-based buffer overflow.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5hpe_loadrunner_and_performance_centerHPE LoadRunner and Performance Center
▶NVDhp/loadrunner12.53

🔴Vulnerability Details

2
GHSA
GHSA-4282-67jc-f356: HPE LoadRunner before 12↗2022-05-13
▶
CVEList
CVE-2017-5789: HPE LoadRunner before 12↗2017-10-13
▶