Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

TeamViewer DLL side loading Vulnerability - Oct19 (Windows)

Information

Severity

Severity

Medium

Family

Family

General

CVSSv2 Base

CVSSv2 Base

5.0

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Solution Type

Solution Type

Vendor Patch

Created

Created

4 years ago

Modified

Modified

4 years ago

Summary

The host is installed with TeamViewer Premium is prone to a dll-side-loading vulnerability.

Insight

Insight

A DLL side loading vulnerability in the Windows Service in TeamViewer on Windows could allow an attacker to perform code execution on a target system via a service restart where the DLL was previously installed with administrative privileges. Exploitation requires that an attacker be able to create a new file in the TeamViewer application directory, directory permissions restrict that by default.

Affected Software

Affected Software

TeamViewer versions through 11.0.133222, 12.0.181268, 13.2.36215 and 14.6.4835 on Windows.

Detection Method

Detection Method

Checks if a vulnerable version is present on the target host.

Solution

Solution

Update to TeamViewer version 11.0.214397, 12.0.214399, 13.2.36216, 14.7.1965 or later.

Common Vulnerabilities and Exposures (CVE)