CVE-2017-5789

CRITICAL 9.8CVE-2017-5789 · Published 11/10/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
loadrunner hp	`≤ 12.53`	No fix yet
performance center hp	`≤ 12.53`	No fix yet

Description

HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. At least in LoadRunner, this is a libxdrutil.dll mxdr_string heap-based buffer overflow.

References

securityfocus.com/bid/101224 · Third Party Advisory
securityfocus.com/bid/96774 · Third Party Advisory
securitytracker.com/id/1038028 · Third Party Advisory
securitytracker.com/id/1038029 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-17-160 · Third Party Advisory
h20566.www2.hpe.com/hpsc/doc/public/display · Vendor Advisory
tenable.com/security/research/tra-2017-13 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free