PT-2010-4573 · Teamviewer · Teamviewer

Glafkos Charalambous · Published 2010-08-26 · Updated 2018-10-10 · CVE-2010-3128

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TeamViewer versions 5.0.8703 and earlier

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse dwmapi.dll located in the same folder as a .tvs or .tvc file.

Recommendations For TeamViewer versions 5.0.8703 and earlier, consider updating to a newer version to mitigate the risk of exploitation. As a temporary workaround, restrict access to the dwmapi.dll file to minimize the risk of DLL hijacking attacks. Avoid executing .tvs or .tvc files from untrusted sources until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2010-3128

Affected Products

Teamviewer

References · 8

• 🔥 http://exploit-db.com/exploits/14734 · Exploit
• 🔥 https://exploit-db.com/exploits/14734 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-3128 · Security Note
• http://secunia.com/advisories/41112 · Vendor Advisory
• http://vupen.com/english/advisories/2010/2174 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3128 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6773 · Note
• http://securityfocus.com/archive/1/513317/100/0/threaded · Note