CVE-2019-18196
First published: Thu Oct 24 2019(Updated: )
A DLL side loading vulnerability in the Windows Service in TeamViewer versions up to 11.0.133222 (fixed in 11.0.214397), 12.0.181268 (fixed in 12.0.214399), 13.2.36215 (fixed in 13.2.36216), and 14.6.4835 (fixed in 14.7.1965) on Windows could allow an attacker to perform code execution on a target system via a service restart where the DLL was previously installed with administrative privileges. Exploitation requires that an attacker be able to create a new file in the TeamViewer application directory; directory permissions restrict that by default.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Teamviewer Teamviewer | <11.0.214397 | |
| Teamviewer Teamviewer | >=12.0.0<12.0.214399 | |
| Teamviewer Teamviewer | >=13.0.0<13.2.36216 | |
| Teamviewer Teamviewer | >=14.0.0<14.7.1965 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-18196?
CVE-2019-18196 refers to a DLL side loading vulnerability in the Windows Service in TeamViewer.
Which versions of TeamViewer are affected by CVE-2019-18196?
TeamViewer versions up to 11.0.133222, 12.0.181268, 13.2.36215, and 14.6.4835 are affected by CVE-2019-18196.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability to perform code execution on a target system.
How can I fix CVE-2019-18196?
To fix CVE-2019-18196, update your TeamViewer software to version 11.0.214397, 12.0.214399, 13.2.36216, or 14.7.1965.
Where can I find more information about CVE-2019-18196?
You can find more information about CVE-2019-18196 at the following references: [Reference 1](https://community.teamviewer.com/t5/Announcements/Security-bulletin-CVE-2019-18196/td-p/74564) and [Reference 2](https://safebreach.com/Post/TeamViewer-Windows-Client-v11-to-v14-DLL-Preloading-and-Potential-Abuses-CVE-2019-18196).
- collector/nvd-index
- agent/event
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/teamviewer
- canonical/teamviewer teamviewer
- version/teamviewer teamviewer/12.0.0
- version/teamviewer teamviewer/13.0.0
- version/teamviewer teamviewer/14.0.0
- vendor/microsoft
- canonical/microsoft windows