SolarWinds Server and Application Monitor 'Pepco32c.ocx' ActiveX Overflow Vulnerability

Bugtraq ID:	62585
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 22 2013 12:00AM
Updated:	Oct 10 2013 09:55PM
Credit:	Blake
Vulnerable:
Not Vulnerable:

SolarWinds Server and Application Monitor 'Pepco32c.ocx' ActiveX Overflow Vulnerability

SolarWinds Server and Application Monitor ActiveX Control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input.

An attacker can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.

SolarWinds Server and Application Monitor 6.0 is vulnerable; other versions may also be affected.

SolarWinds Server and Application Monitor 'Pepco32c.ocx' ActiveX Overflow Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/62585.html.txt

SolarWinds Server and Application Monitor 'Pepco32c.ocx' ActiveX Overflow Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

SolarWinds Server and Application Monitor Buffer Overflow Vulnerability

References:

• SolarWinds Homepage (SolarWinds)