IT

Tracker / CVE-2019-18196

CVE-2019-18196

Medium 6.7

A DLL side loading vulnerability in the Windows Service in TeamViewer versions up to 11.0.133222 (fixed in 11.0.214397), 12.0.181268 (fixed in 12.0.214399), 13.2.36215 (fixed in 13.2.36216), and 14.6.4835 (fixed in 14.7.1965) on Windows could allow an attacker to perform code execution on a target system via a service restart where the DLL was previously installed with administrative privileges. Exploitation requires that an attacker be able to create a new file in the TeamViewer application directory; directory permissions restrict that by default.

Affected products and versions

teamviewer teamviewer · … → 11.0.214397
teamviewer teamviewer · 12.0.0 → 12.0.214399
teamviewer teamviewer · 13.0.0 → 13.2.36216
teamviewer teamviewer · 14.0.0 → 14.7.1965

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References