349 matches found
HP LoadRunner lrFileIOService ActiveX Remote Code Execution
This module exploits a vulnerability on the lrFileIOService ActiveX, as installed with HP LoadRunner 11.50. The vulnerability exists in the WriteFileBinary method where user provided data is used as a memory pointer. This module has been tested successfully on IE6-IE9 on Windows XP, Vista and 7,...
HP LoadRunner security vulnerabilities
Few different buffer overflows...
[security bulletin] HPSBMU02785 SSRT100526 rev.2 - HP LoadRunner Running on Windows, Remote Execution of Arbitrary Code, Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03216705 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03216705 Version: 2 HPSBMU02785...
HP LoadRunner < 11.00 Patch 4 Code Execution (intrusive check)
The version of HP LoadRunner hosted on the remote Windows host is potentially affected by a code execution vulnerability. The application fails to properly handle incoming packets with '0x00000000' as the first 32-bit value. A remote, unauthenticated attacker, exploiting this flaw, could execute...
HP LoadRunner Detect
HP LoadRunner, an application for testing software performance, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59717; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...
HP LoadRunner < 11.00 Patch 4 Code Execution Vulnerability
The version of HP LoadRunner installed on the remote Windows host is potentially affected by a code execution vulnerability. The application fails to properly handle incoming packets with '0x00000000' as the first 32-bit value. A remote, unauthenticated attacker, exploiting this flaw, could execu...
[security bulletin] HPSBMU02785 SSRT100526 rev.1 - HP LoadRunner Running on Windows, Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03216705 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03216705 Version: 1 HPSBMU02785...
CVE-2011-4789
Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the...
Stack overflow
Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the...
CVE-2011-4789
Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the...
CVE-2011-4789
CVE-2011-4789 describes a stack-based buffer overflow in HP LoadRunner 11.00 before patch 4, via a crafted packet size to magentservice.exe, enabling remote code execution. HP notes the vulnerable product is actually LoadRunner (not Diagnostics Server). Public listings and advisories (ZDI-12-016)...
CVE-2011-4789: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the...
CVE-2011-2328
Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a .usr aka Virtual User script file with long directives...
Buffer overflow
Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a .usr aka Virtual User script file with long directives...
CVE-2011-2328
Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a .usr aka Virtual User script file with long directives...
CVE-2011-2328
CVE-2011-2328 affects HP LoadRunner (Windows) where a buffer overflow can be triggered by a long .usr (Virtual User script) directive, potentially enabling remote arbitrary code execution or a DoS (daemon crash). The issue arises from handling oversized inputs in the script processing component. ...
CVE-2011-2328: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a .usr aka Virtual User script file with long directives...
HP LoadRunner buffer overflow vulnerability
Overview HP LoadRunner contains a buffer overflow vulnerability when parsing Virtual User script files. Description According to HP's website: HP LoadRunner software is the industry standard for performance validation. It allows you to prevent application performance problems by detecting...
HP LoadRunner Unspecified Arbitrary Remote Code Execution
The version of HP LoadRunner installed on the remote host reportedly blindly trusts user-supplied data as an allocation size and uses to copy data from a request packet into a statically allocated heap buffer. A remote attacker who is able to contact TCP ports 5001 or 5002 on the remote host can...