PT-2024-7719 · Teamviewer · Teamviewer

Peter Gabaldon

·

Published

2024-08-05

·

Updated

2024-12-26

·

CVE-2024-7481

CVSS v3.1

8.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions TeamViewer Remote Clients versions prior to 15.58.4
Description The issue is related to improper verification of cryptographic signatures during the installation of a printer driver via the TeamViewer service.exe component. This allows an attacker with local unprivileged access on a Windows system to elevate their privileges. The vulnerability can be exploited to install drivers, potentially leading to further system compromise.
Recommendations For versions prior to 15.58.4, update to version 15.58.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the TeamViewer service.exe component until a patch is applied. Additionally, avoid installing any printer drivers via this component until the issue is resolved.

Exploit

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

BDU:2024-09182
CVE-2024-7481
ZDI-24-1290

Affected Products

Teamviewer