CVE-2015-1500 – Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl

Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via unspecified vectors to (1) graphManager.load or (2) factory.load.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1500

Reference (s):

• http://www.zerodayinitiative.com/advisories/ZDI-15-042/
• http://www.zerodayinitiative.com/advisories/ZDI-15-044/