CVE-2013-4801

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1736...

CVE-2013-4801

CVE-2013-4801 is linked to HP LoadRunner before 11.52 and is tied to the lrLRIServices ActiveX control. The connected documents show a remote code-execution flaw in the ActiveX control’s handling of input to the output directory mutator, exploitable by persuading a user to open a crafted page or ...

CVE-2013-4797

HP LoadRunner vulnerability CVE-2013-4797 involves the LrWebIEBrowserMgr.dll ActiveX control. The ZDI advisory (ZDI-13-206) details a remote code execution flaw in the FlushSnapshotToFile method of this control, where improperDestinationPath sanitization enables directory traversal and arbitrary ...

CVE-2013-4799

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1734...

CVE-2013-4798

HP LoadRunner prior to 11.52 is vulnerable via the lrFileIOService ActiveX WriteFileString method, which does not sanitize input and allows a remote attacker to write files (directory traversal) potentially enabling code execution. The issue affects Windows platforms and has been addressed by upg...

CVE-2013-2368

HP LoadRunner before 11.52 is affected by CVE-2013-2368 through the micWebAjax.dll ActiveX NotifyEvent method. The vulnerability causes stack corruption via user-supplied input, enabling remote code execution when a user visits a crafted page or opens a malicious file. Exploitation requires user ...

Hewlett-Packard LoadRunner lrFileIOService ActiveX Control WriteFileBinary Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LoadRunner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the lrFileIOServic...

HP LoadRunner security vulnerabilities

Few different buffer overflows...

[security bulletin] HPSBMU02785 SSRT100526 rev.2 - HP LoadRunner Running on Windows, Remote Execution of Arbitrary Code, Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03216705 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03216705 Version: 2 HPSBMU02785...

HP LoadRunner < 11.00 Patch 4 Code Execution (intrusive check)

The version of HP LoadRunner hosted on the remote Windows host is potentially affected by a code execution vulnerability. The application fails to properly handle incoming packets with '0x00000000' as the first 32-bit value. A remote, unauthenticated attacker, exploiting this flaw, could execute...

HP LoadRunner Detect

HP LoadRunner, an application for testing software performance, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59717; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

HP LoadRunner < 11.00 Patch 4 Code Execution Vulnerability

The version of HP LoadRunner installed on the remote Windows host is potentially affected by a code execution vulnerability. The application fails to properly handle incoming packets with '0x00000000' as the first 32-bit value. A remote, unauthenticated attacker, exploiting this flaw, could execu...

[security bulletin] HPSBMU02785 SSRT100526 rev.1 - HP LoadRunner Running on Windows, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03216705 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03216705 Version: 1 HPSBMU02785...

CVE-2011-4789

Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the...

Stack overflow

Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the...

CVE-2011-4789

CVE-2011-4789 describes a stack-based buffer overflow in HP LoadRunner 11.00 before patch 4, via a crafted packet size to magentservice.exe, enabling remote code execution. HP notes the vulnerable product is actually LoadRunner (not Diagnostics Server). Public listings and advisories (ZDI-12-016)...

CVE-2011-4789

Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the...

CVE-2011-2328

Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a .usr aka Virtual User script file with long directives...

Buffer overflow

Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a .usr aka Virtual User script file with long directives...

CVE-2011-2328

CVE-2011-2328 affects HP LoadRunner (Windows) where a buffer overflow can be triggered by a long .usr (Virtual User script) directive, potentially enabling remote arbitrary code execution or a DoS (daemon crash). The issue arises from handling oversized inputs in the script processing component. ...