CVE-2017-5789

Опубликовано: 11 окт. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. At least in LoadRunner, this is a libxdrutil.dll mxdr_string heap-based buffer overflow.

Ссылки

http://www.securityfocus.com/bid/101224
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/96774
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038028
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038029
Third Party Advisory
VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-17-160/
Third Party Advisory
VDB Entry
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03712en_us
Vendor Advisory
https://www.tenable.com/security/research/tra-2017-13
Third Party Advisory
http://www.securityfocus.com/bid/101224
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/96774
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038028
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038029
Third Party Advisory
VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-17-160/
Third Party Advisory
VDB Entry
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03712en_us
Vendor Advisory
https://www.tenable.com/security/research/tra-2017-13
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hp:loadrunner:*:*:*:*:*:*:*:*

Версия до 12.53 (включая)

cpe:2.3:a:hp:performance_center:*:*:*:*:*:*:*:*

Версия до 12.53 (включая)

EPSS

Процентиль: 97%

0.33852

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-4282-67jc-f356