A vulnerability has been reported in HP OpenView Performance Agent, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to boundary errors in the included DynaZip library.

For more information:
SA21180

The vulnerability is reported in HP OpenView Performance Agent version C.04.60, C.04.70, and C.04.72 running on Windows.

Solution
The vendor recommends contacting HP Services support and requesting the Performance Agent Hotfix: "Migrate away from the 3.0.0.15 version of DynaZip library."

Provided and/or discovered by
Reported by the vendor.

Original Advisory
HPSBMA02396 SSRT080175:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01622011

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area