CVE-2007-0446
Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0...
Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll.
- Record
CVE-2007-0446- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll.
- Record
CVE-2007-0446- Updated
- 2026-11-02
EUVDEUVD-2007-0446 No score
Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll.
- Record
EUVD-2007-0446- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7w3r-6hhr-p685 No score
Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0...
Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll.
- Record
GHSA-7w3r-6hhr-p685- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0446 is a high vulnerability (CVSS 10.0) in Hp Mercury Loadrunner Agent, published February 8, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 44.9%, the 98th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/32390
zerodayinitiative.com/advisories/ZDI-07-007.html
securitytracker.com/id?1017612
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00854250
osvdb.org/33132
ciac.org/ciac/bulletins/r-123.shtml
Show 9 moreShow less
securityfocus.com/archive/1/459505/100/0/threaded
kb.cert.org/vuls/id/303012
vupen.com/english/advisories/2007/0535
secunia.com/advisories/24112
nvd.nist.gov/vuln/detail/CVE-2007-0446
github.com/advisories/GHSA-7w3r-6hhr-p685