SSRT101319

The version of HP LoadRunner running on the remote host is 11.52, and the file 'two_way_comm.dll' is not patched. It is, therefore, affected by a remote code execution vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to cause a buffer overflow, resulting in a denial of service condition or the execution of arbitrary code.

The version of HP LoadRunner installed on the remote host is 11.52 without the proper patch to 'two_way_comm.dll'. It is, therefore, affected by a buffer overflow flaw that can allow an unauthenticated, remote attacker to execute arbitrary code in the context of the HP LoadRunner Agent process.

ID	Name	Product	Family	Severity
83993	HP LoadRunner 11.52 Buffer Overflow RCE (uncredentialed check)	Nessus	Gain a shell remotely	critical
83815	HP LoadRunner 11.52 Buffer Overflow RCE	Nessus	Windows	critical

CVE-2015-2110

high

Tenable Plugins

critical

critical