PT-2010-4573 · Teamviewer · Teamviewer

Glafkos Charalambous · Publicado 2010-08-26 · Atualizado 2018-10-10 · CVE-2010-3128

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TeamViewer versions 5.0.8703 and earlier

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse dwmapi.dll located in the same folder as a .tvs or .tvc file.

Recommendations For TeamViewer versions 5.0.8703 and earlier, consider updating to a newer version to mitigate the risk of exploitation. As a temporary workaround, restrict access to the dwmapi.dll file to minimize the risk of DLL hijacking attacks. Avoid executing .tvs or .tvc files from untrusted sources until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2010-3128

Produtos afetados

Teamviewer

Referências · 8

• 🔥 http://exploit-db.com/exploits/14734 · Exploit
• 🔥 https://exploit-db.com/exploits/14734 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-3128 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3128 · Nota
• http://secunia.com/advisories/41112 · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/2174 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6773 · Nota
• http://securityfocus.com/archive/1/513317/100/0/threaded · Nota