CVE-2007-0446: HP Mercury Loadrunner Agent

High severity, CVSS 10.0. EPSS: 44.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll.

Affected products

• HP Mercury Loadrunner Agent: version 8.0 only; version 8.1 only
• HP Mercury Monitor Over Firewall: version 8.1 only
• HP Mercury Performance Center Agent: version 8.0 only; version 8.1 only

Published 2007-02-08. Last modified 2026-06-16.