CVE-2017-5789

Critical

Published: 11/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

HPE LoadRunner before version 12.53 Patch 4 and HPE Performance Center before version 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. In LoadRunner, this involves a heap-based buffer overflow in libxdrutil.dll.

Risk Assessment

Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially gaining control over the system. This poses a significant security risk to the organization.

Recommendation

It is recommended to update HPE LoadRunner and HPE Performance Center to version 12.53 Patch 4 or later to mitigate this vulnerability.

Original NVD description (English source)

HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. At least in LoadRunner, this is a libxdrutil.dll mxdr_string heap-based buffer overflow.