CVE-2010-3128: Critical severity TeamViewer TeamViewer vulnerability
Published Aug 26, 2010
·Updated
Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file.
Affected Software
5 affected components
TeamViewer TeamViewer<=5.0.8703
TeamViewer TeamViewer=1.85
TeamViewer TeamViewer=2.44
TeamViewer TeamViewer=3.6.5523
TeamViewer TeamViewer=4.1.8107
Event History
Aug 26, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3128?
CVE-2010-3128 is classified as a high severity vulnerability due to its ability to allow arbitrary code execution.
2
How do I fix CVE-2010-3128?
To fix CVE-2010-3128, upgrade TeamViewer to a version later than 5.0.8703.
3
What kind of attacks can be conducted using CVE-2010-3128?
CVE-2010-3128 can enable DLL hijacking attacks and execution of arbitrary code.
4
Who is affected by CVE-2010-3128?
Local users and potentially remote attackers are affected by CVE-2010-3128.
5
In which versions of TeamViewer is CVE-2010-3128 present?
CVE-2010-3128 is present in TeamViewer versions 5.0.8703 and earlier, as well as several earlier major versions.