CVE-2011-4789: HP Diagnostics

High severity, CVSS 10.0. EPSS: 64.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the vulnerable product is actually HP LoadRunner."

Affected products

• HP Diagnostics: any version

Published 2012-01-13. Last modified 2026-06-16.