PT-2016-5905
CVE-2016-4359
·
تاريخ النشر
2016-06-03
·
تاريخ التحديث
2017-11-03
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
HPE LoadRunner versions 11.52 through patch 3
HPE LoadRunner versions 12.00 through patch 1
HPE LoadRunner versions 12.01 through patch 3
HPE LoadRunner versions 12.02 through patch 2
HPE LoadRunner versions 12.50 through patch 3
HPE Performance Center versions 11.52 through patch 3
HPE Performance Center versions 12.00 through patch 1
HPE Performance Center versions 12.01 through patch 3
HPE Performance Center versions 12.20 through patch 2
HPE Performance Center versions 12.50 through patch 1
Description
The issue is a stack-based buffer overflow in mchan.dll, allowing remote attackers to execute arbitrary code via a long
server name value.Recommendations
For HPE LoadRunner versions 11.52 through patch 3, update to a version after patch 3.
For HPE LoadRunner versions 12.00 through patch 1, update to a version after patch 1.
For HPE LoadRunner versions 12.01 through patch 3, update to a version after patch 3.
For HPE LoadRunner versions 12.02 through patch 2, update to a version after patch 2.
For HPE LoadRunner versions 12.50 through patch 3, update to a version after patch 3.
For HPE Performance Center versions 11.52 through patch 3, update to a version after patch 3.
For HPE Performance Center versions 12.00 through patch 1, update to a version after patch 1.
For HPE Performance Center versions 12.01 through patch 3, update to a version after patch 3.
For HPE Performance Center versions 12.20 through patch 2, update to a version after patch 2.
For HPE Performance Center versions 12.50 through patch 1, update to a version after patch 1.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾