CVE-2016-4359

Critical

Published: 08/06/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in mchan.dll in the agent of HPE LoadRunner and Performance Center allows remote attackers to execute arbitrary code. This issue affects versions 11.52, 12.00, 12.01, 12.02, and 12.50, along with their respective patches.

Risk Assessment

Attackers can remotely gain full control over the system, posing a serious security threat to the organization.

Recommendation

It is recommended to upgrade to the latest versions of HPE LoadRunner and Performance Center that include patches addressing this vulnerability.

Original NVD description (English source)

Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.20 through patch 2, and 12.50 through patch 1 allows remote attackers to execute arbitrary code via a long -server_name value, aka ZDI-CAN-3516.