101224

96774

1038028

1038029

http://www.zerodayinitiative.com/advisories/ZDI-17-160/

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03712en_us

https://www.tenable.com/security/research/tra-2017-13

The version of HP Performance Center installed on the remote Windows host is prior to 12.53 Patch 4. It is, therefore, affected by a remote code execution vulnerability due to a heap-based buffer overflow condition in the mxdr_string() function in libxdrutil.dll. An unauthenticated, remote attacker can exploit this to execute arbitrary code.

The version of HP LoadRunner installed on the remote Windows host is prior to 12.53 patch 4. It is, therefore, affected by a remote code execution vulnerability due to a heap-based buffer overflow condition in the mxdr_string() function in libxdrutil.dll. An unauthenticated, remote attacker can exploit this to execute arbitrary code.

ID	Name	Product	Family	Severity
97889	HP Performance Center < 12.53 Patch 4 libxdrutil.dll mxdr_string() RCE	Nessus	Windows	critical
97888	HPE LoadRunner < 12.53 Patch 4 libxdrutil.dll mxdr_string() RCE	Nessus	Windows	critical

CVE-2017-5789

critical

Tenable Plugins

critical

critical