Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-4798.
PoCs published by Metasploit, Brian Gorenc, juan vazquez, including Metasploit module exploits/windows/browser/hp_loadrunner_writefilestring.
AI-analyzed exploit summary This Metasploit module exploits CVE-2013-4798 in HP LoadRunner's lrFileIOService ActiveX control by abusing the WriteFileString method to write an arbitrary DLL, which is then loaded via an insecure LoadLibrary call in lrMdrvService. It targets IE6-8 on Windows XP.
Description
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705.
Exploits (2)
This Metasploit module exploits CVE-2013-4798 in HP LoadRunner's lrFileIOService ActiveX control by abusing the WriteFileString method to write an arbitrary DLL, which is then loaded via an insecure LoadLibrary call in lrMdrvService. It targets IE6-8 on Windows XP.
This Metasploit module exploits a vulnerability in HP LoadRunner's lrFileIOService ActiveX control (CVE-2013-4798) to write arbitrary files and achieve remote code execution. It drops a malicious DLL via WriteFileString and loads it through an insecure LoadLibrary call in lrMdrvService.