Unscored severity · published Feb 16, 2015
CVE-2015-1500
Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via…
–
CVSS
8.2%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via unspecified vectors to (1) graphManager.load or (2) factory.load.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.2% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Server And Application Monitor · Solarwinds
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-1500
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-1500
Patch
http://www.zerodayinitiative.com/advisories/ZDI-15-042/
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-15-044/
More from Server And Application Monitor
7.5
CVE-2022-47508
Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this…
–
CVE-2015-1501
The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via a…