[security bulletin] HPSBMA02624 SSRT100195 rev.1 - HP LoadRunner, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02680678 Version: 1 HPSBMA02624 SSRT100195 rev.1 - HP LoadRunner, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

CVE-2011-0272

HP LoadRunner 9.52 is affected by a remote code execution vulnerability. The magentproc.exe process binds by default to TCP ports 5001/5002 (and additional ports per some advisories), blindly trusts a user-supplied value as an allocation size and copies data from a request into a heap buffer, ena...