CVE-2013-4798

This Metasploit module exploits CVE-2013-4798 in HP LoadRunner's lrFileIOService ActiveX control by abusing the WriteFileString method to write an arbitrary DLL, which is then loaded via an insecure LoadLibrary call in lrMdrvService. It targets IE6-8 on Windows XP.

This Metasploit module exploits a vulnerability in HP LoadRunner's lrFileIOService ActiveX control (CVE-2013-4798) to write arbitrary files and achieve remote code execution. It drops a malicious DLL via WriteFileString and loads it through an insecure LoadLibrary call in lrMdrvService.