Buffer Overflow Vulnerability in HP LoadRunner from HP

CVE-2011-4789

Summary

A buffer overflow vulnerability exists in the magentservice.exe component of the HP LoadRunner server. This flaw enables remote attackers to execute arbitrary code by sending a specially crafted packet containing a maliciously manipulated size value. Although initially reported as affecting HP Diagnostics Server, HP clarified that the vulnerability is specific to HP LoadRunner prior to patch 4. Organizations using affected versions should apply the necessary patches to safeguard against potential exploits.

References