CVE-2015-1500

SolarWinds Server and Application Monitor - Remote Code Execution via TSUnicodeGraphEditorControl

Title source: llm
STIX 2.1

Description

Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via unspecified vectors to (1) graphManager.load or (2) factory.load.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-15-044/

Scores

EPSS 0.4260
EPSS Percentile 97.5%

Details

CWE
CWE-119
Status published
Products (1)
solarwinds/server_and_application_monitor
Published Feb 16, 2015
Tracked Since Feb 18, 2026