Buffer overflow in Solarwinds Server And Application Monitor

CVE-2015-1500

Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via unspecified vectors to (1) graphManager.load or (2) factory.load.

Vulnerability class: Buffer Overflow

EPSS: 0.082 (94.3th percentile) — read the EPSS interpretation.

Affected products

Solarwinds Server_and_application_monitor
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (Patch, x_refsource_MISC)