Home

CVE-2017-5789

Description

HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. At least in LoadRunner, this is a libxdrutil.dll mxdr_string heap-based buffer overflow.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
33.852

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2007-6530,CVE-2011-2328,CVE-2017-5789,CVE-2017-8953 are affected in HP LoadRunner 12.50-p3Windows
Vulnerabilities CVE-2017-5789 are affected in HP LoadRunner 12.53-p3Windows
Multiple Vulnerabilities affected in loadrunner 12.50-p3NCM
Multiple Vulnerabilities affected in loadrunner 12.50-p1NCM
Multiple Vulnerabilities affected in loadrunner 11.50NCM
Multiple Vulnerabilities affected in loadrunner 11.0.0.0NCM
Multiple Vulnerabilities affected in loadrunner 9.52NCM
Multiple Vulnerabilities affected in loadrunner 9.51NCM
Multiple Vulnerabilities affected in loadrunner 9.50.0NCM
Vulnerabilities CVE-2013-4839 ,CVE-2013-6213 ,CVE-2015-5426 ,CVE-2017-5789 ,CVE-2017-8953 are affected in loadrunner 11.51NCM
Multiple Vulnerabilities affected in performance_center 12.50-p1NCM
Multiple Vulnerabilities affected in performance_center 12.01-p3NCM
Multiple Vulnerabilities affected in performance_center 12.00-p1NCM
Multiple Vulnerabilities affected in performance_center 11.52-p3NCM
Vulnerabilities CVE-2016-4359 ,CVE-2016-4360 ,CVE-2016-4361 ,CVE-2017-5789 ,CVE-2017-8953 are affected in loadrunner 11.52-p3NCM
Vulnerabilities CVE-2016-4361 ,CVE-2016-4384 ,CVE-2017-5789 ,CVE-2017-8953 are affected in loadrunner 12.02-p2NCM
Vulnerabilities CVE-2016-4361 ,CVE-2017-5789 ,CVE-2017-8953 are affected in loadrunner 12.01-p3NCM
Vulnerabilities CVE-2016-4361 ,CVE-2017-5789 ,CVE-2017-8953 are affected in loadrunner 12.00-p1NCM
Vulnerabilities CVE-2017-14359 ,CVE-2017-5789 ,CVE-2017-8953 are affected in performance_center 12.20-p2NCM
Vulnerabilities CVE-2017-5789 ,CVE-2017-8953 are affected in loadrunner 11.52NCM
Vulnerabilities CVE-2017-5789 ,CVE-2017-8953 are affected in loadrunner 9.0.0NCM
Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-5789)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234