Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via unspecified vectors to (1) graphManager.load or (2) factory.load.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1500
Reference (s):
- http://www.zerodayinitiative.com/advisories/ZDI-15-042/
- http://www.zerodayinitiative.com/advisories/ZDI-15-044/