Loadrunner CVE-2015-2110

CRITICAL

Buffer Overflow (CWE-119)

2015-05-25 hp-security-alert@hp.com

HP Buffer Overflow RCE Loadrunner

10.0

CVSS 2.0 · NVD

Share

Severity by source

NVD PRIMARY

10.0 CRITICAL

AV:N/AC:L/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Low

Confidentiality

C

Integrity

C

Availability

C

Lifecycle Timeline

1

CVE Published

May 25, 2015 - 17:59 cve.org

CRITICAL 10.0

DescriptionCVE.org

Buffer overflow in HP LoadRunner 11.52 allows remote attackers to execute arbitrary code via unspecified vectors.

AnalysisAI

Buffer overflow in HP LoadRunner 11.52 allows remote attackers to execute arbitrary code via unspecified vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 33.8%.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Buffer overflow in HP LoadRunner 11.52 allows remote attackers to execute arbitrary code via unspecified vectors. Affected products include: Hp Loadrunner.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

More in Loadrunner

View all

CVE-2013-4798 CRITICAL Emergency POC

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown ve

CVE-2013-4837 CRITICAL Emergency POC

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arb

CVE-2013-2370 HIGH Act Now POC

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown ve

CVE-2013-4800 CRITICAL Emergency POC

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown ve

CVE-2017-5789 CRITICAL Emergency

HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute ar

CVE-2013-6213 CRITICAL Act Now

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 Patch 1 allows remote attackers to exe

CVE-2013-4838 CRITICAL Act Now

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arb

CVE-2016-4359 CRITICAL Act Now

Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12

CVE-2013-4799 HIGH Act Now

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown ve

CVE-2016-4360 CRITICAL Act Now

web/admin/data.js in the Performance Center Virtual Table Server (VTS) component in HPE LoadRunner 11.52 through patch 3

CVE-2016-4384 HIGH This Week

HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a denial of service via

CVE-2013-4797 HIGH This Week

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown ve

Same weakness CWE-119 – Buffer Overflow

View all

CVE-2017-11882 HIGH POC

CVE-2014-6332 HIGH POC

CVE-2023-4966 CRITICAL POC

CVE-2015-2426 HIGH POC

CVE-2013-3918 HIGH POC

CVE-2017-11774 HIGH POC

CVE-2013-3660 HIGH POC

CVE-2017-6736 HIGH POC

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2015-3113 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2009-0927 HIGH POC

CVE-2012-1889 HIGH POC

CVE-2017-11882 HIGH POC

CVE-2010-3333 HIGH POC

Share

CVE-2015-2110 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy