9.3
CVE-2013-3249
- EPSS 6.01%
- Veröffentlicht 20.03.2014 16:55:11
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle PSIRT-CNA@flexerasoftware.com
- CVE-Watchlists
- Unerledigt
Stack-based buffer overflow in the "Add from text file" feature in the DameWare Exporter tool (DWExporter.exe) in DameWare Remote Support 10.0.0.372, 9.0.1.247, and earlier allows user-assisted attackers to execute arbitrary code via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Solarwinds ≫ Dameware Remote Support Version <= 9.0.1.247
Solarwinds ≫ Dameware Remote Support Version >= 10.0 <= 10.0.0.372
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 6.01% | 0.924 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
http://osvdb.org/95658
http://secunia.com/advisories/53096
http://www.securityfocus.com/bid/61453
https://exchange.xforce.ibmcloud.com/vulnerabilities/85973