Vulnerability in Teamviewer

CVE-2010-3128

Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file.

EPSS: 0.084 (94.4th percentile) — read the EPSS interpretation.

Affected products

  • Teamviewer — versions 4.1.8107, 2.44, 1.85
  • N/a — versions n/a

References