PT-2019-15818 · Teamviewer · Teamviewer

Published 2019-12-02 · Updated 2024-02-14 · CVE-2019-19362

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TeamViewer desktop application version 14.3.4730

Description An issue in the Chat functionality of the TeamViewer desktop application on Windows allows every communication to be saved within Windows main memory upon login. When a user logs out or deletes conversation history without exiting the application, this data remains in main memory and could be read by a local user with the same or greater privileges.

Recommendations For version 14.3.4730, update to a newer version that contains a fix for this issue, as stated by the vendor.

Exploit

Fix

Weakness Enumeration

CWE-212

Related Identifiers

CVE-2019-19362

Affected Products

Teamviewer

References · 3

• 🔥 http://nestedif.com/teamviewer-vulnerability-improper-session-handling-leading-to-information-disclosure-advisory · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-19362 · Security Note
• https://osv.dev/vulnerability/CVE-2019-19362 · Vendor Advisory