Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3 12.00 through patch 1 12.01 through patch 3 12.02 through patch 2 and 12.50 through patch 3 and Performance Center 11.52 through patch 3 12.00 through patch 1 12.01 through patch 3 12.20 through patch 2 and 12.50 through patch 1 allows remote attackers to execute arbitrary code via a long -server_name value aka ZDI-CAN-3516.