HP LoadRunner micWebAjax.dll ActiveX Control Stack Buffer Overflow (CVE-2013-2368)

A stack buffer overflow vulnerability has been reported in HP LoadRunner...

HP LoadRunner micWebAjax.dll ActiveX NotifyEvent Method Vulnerability

Added: 09/30/2013 CVE: CVE-2013-2368 BID: 61436 OSVDB: 95639 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the micWebAjax ActiveX control. Problem HP LoadRunner before 11.52 is vulnerable to remote code execution due to failure to sanitize user-suppli...

DSquare Exploit Pack: D2SEC_MICWA

Name| d2secmicwa ---|--- CVE| CVE-2013-2368 Exploit Pack| D2ExploitPack Description| HP LoadRunner micWebAjax.dll ActiveX NotifyEvent Buffer Overflow Vulnerability Notes|...

CVE-2013-2368

HP LoadRunner before 11.52 is affected by CVE-2013-2368 through the micWebAjax.dll ActiveX NotifyEvent method. The vulnerability causes stack corruption via user-supplied input, enabling remote code execution when a user visits a crafted page or opens a malicious file. Exploitation requires user ...