HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2021-34859

CVSS 8.8v3.1pub. 2021-10-25upd. 2024-11-21

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TVS files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13697.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Teamviewer

    APP
    Teamviewer
    15.16.8.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2018-16550CRITICAL9.8ten sam produkt

TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mecha...

CVE-2019-18988HIGH7.0⚠ KEVten sam produkt

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is us...

CVE-2021-34858HIGH7.8ten sam produkt

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer. ...

CVE-2021-34803HIGH7.8ten sam produkt

TeamViewer before 14.7.48644 on Windows loads untrusted DLLs in certain situations.

CVE-2020-13699HIGH8.8ten sam produkt

TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious webs...