{"uuid": "a07de932-6639-434c-8dce-716d628be7d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-2370", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/hp_loadrunner_writefilebinary.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"rgod \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability on the lrFileIOService ActiveX, as installed\\n          with HP LoadRunner 11.50. The vulnerability exists in the WriteFileBinary method\\n          where user provided data is used as a memory pointer.  This module has been tested\\n          successfully on IE6-IE9 on Windows XP, Vista and 7, using the LrWebIERREWrapper.dll\\n          11.50.2216.0. In order to bypass ASLR the no aslr compatible module msvcr71.dll is\\n          used. This one is installed with HP LoadRunner.\", \"disclosure_date\": \"2013-07-24\", \"fullname\": \"exploit/windows/browser/hp_loadrunner_writefilebinary\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"HP LoadRunner lrFileIOService ActiveX Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/hp_loadrunner_writefilebinary.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/hp_loadrunner_writefilebinary\", \"references\": [\"CVE-2013-2370\", \"OSVDB-95640\", \"BID-61441\", \"ZDI-13-182\", \"URL-https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03862772\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\", \"IE 7 on Windows XP SP3\", \"IE 8 on Windows XP SP3\", \"IE 7 on Windows Vista\", \"IE 8 on Windows Vista\", \"IE 8 on Windows 7\", \"IE 9 on Windows 7\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:03.209357Z"}