SB2010082601 - Multiple vulnerabilities in TeamViewer 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2010082601

SB2010082601 - Multiple vulnerabilities in TeamViewer

Published: August 26, 2010 Updated: November 7, 2019

Security Bulletin ID SB2010082601
Severity
High
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 50% Low 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Untrusted search path (CVE-ID: CVE-2010-3128)

The vulnerability allows a local attacker to execute arbitrary code on the target system.

The vulnerability exists due to executed malicious .dll file passed via untrusted search path. A local attacker, and possibly remote attacker can execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file.


2) Use of Obsolete Function (CVE-ID: N/A)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to the code uses deprecated or obsolete functions, which suggests that the code has not been actively reviewed or maintained. A remote attacker can execute arbitrary code on the target system.

Successful exploitation of this vulnerability could result in information disclosure, total compromise of the system, and system unavailability.


Remediation

Install update from vendor's website.

References