CVE-2011-2328

HP LoadRunner - Buffer Overflow via Long Directives in .usr File

Title source: llm
STIX 2.1

Description

Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a .usr (aka Virtual User script) file with long directives.

References (3)

Core 3
Core References
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/987308
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/48073
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/67783

Scores

EPSS 0.0639
EPSS Percentile 91.1%

Details

CWE
CWE-119
Status published
Products (1)
hp/loadrunner
Published Jun 02, 2011
Tracked Since Feb 18, 2026