CVE ID | CVE-2014-3459 |
CVSS SCORE | 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P |
AFFECTED VENDORS |
SolarWinds |
AFFECTED PRODUCTS |
Network Configuration Manager |
VULNERABILITY DETAILS |
The specific flaw exists within the handling of the PEstrarg1 property. The issue lies in a failure to validate the size of the input buffer before copying it into a fixed-size buffer on the heap. An attacker can leverage this vulnerability to execute code under the context of the current process. |
ADDITIONAL DETAILS |
Vendor Contact Timeline: -- Mitigation:
|
DISCLOSURE TIMELINE |
|
CREDIT | Andrea Micalizzi aka rgod |