Stack-based buffer overflow vulnerability in SolarWinds Dameware Mini Remote Control - CVE-2016-2345| ID: oval:org.secpod.oval:def:94113 | Date: (C)2023-10-27 (M)2023-10-27 |
| Class: VULNERABILITY | Family: windows |
The host is installed with SolarWinds Dameware Mini Remote Control 12.x before 12.0.3 and is prone to a stack-based buffer overflowvulnerability. A flaw is present in the application, which fails to properly validate the input size of an incoming string before passing it to wsprintfw. Successful exploitation could lead to SYSTEM level privilege on any system running the dwmrcs daemon.
| Platform: |
| Microsoft Windows 7 |
| Microsoft Windows 8.1 |
| Microsoft Windows 10 |
| Microsoft Windows Server 2008 |
| Microsoft Windows Server 2008 R2 |
| Microsoft Windows Server 2012 |
| Microsoft Windows Server 2012 R2 |
| Microsoft Windows Server 2016 |
| Microsoft Windows Server 2019 |
| Microsoft Windows 11 |
| Microsoft Windows Server 2022 |
| Product: |
| SolarWinds Dameware Mini Remote Control |
