DameWare Remote Support < 9 Hotfix 2 / 10 Hotfix 2 DWExporter.exe Buffer Overflow

High Nessus Plugin ID 72742


An application on the remote host is affected by a buffer overflow vulnerability.


The remote Windows host has a version of DameWare Remote Support prior to 9.0.1 / 10.0.0 Hotfix 2. It is, therefore, affected by a buffer overflow vulnerability due to a flaw in DWExporter.exe. An attacker could potentially exploit this vulnerability to remotely execute arbitrary code.


Upgrade to 9.0.1 Hotfix 2 / 10.0.0 Hotfix 2 or later.

Plugin Details

Severity: High

ID: 72742

File Name: dameware_remote_support_overflow.nasl

Version: $Revision: 1.3 $

Type: local

Agent: windows

Family: Windows

Published: 2014/02/28

Modified: 2017/10/31

Dependencies: 72741

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:dameware:remote_support

Required KB Items: SMB/dameware_remote_support/version, SMB/dameware_remote_support/path

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2013/05/10

Vulnerability Publication Date: 2013/07/25

Reference Information

CVE: CVE-2013-3249

BID: 61453

OSVDB: 95658