What’s Vulnerable › Vulnerabilities

CVE-2011-4789

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 64.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2012-01-13 · updated 2026-06-16
• Weakness: CWE-119

Description

Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the vulnerable product is actually HP LoadRunner."

Affected products

• Hewlett Packard Enterprise Diagnostics: all versions

References

• http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03216705
• http://osvdb.org/78309
• http://www.securityfocus.com/bid/51398
• http://zerodayinitiative.com/advisories/ZDI-12-016/
• http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03216705
• http://osvdb.org/78309
• http://www.securityfocus.com/bid/51398
• http://zerodayinitiative.com/advisories/ZDI-12-016/

Get alerted when CVE-2011-4789 or the next vulnerability affects your stack