critical9.3Public exploit code
CVE-2010-3128
Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TeamViewer 5.0.8703 - 'dwmapi.dll' DLL Hijacking2010-08-24 · local · windows
Impact
Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teamviewer | Teamviewer | through 5.0.8703 Versions 1.85, 2.44, 3.6.5523, 4.1.8107 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/41112
- http://www.exploit-db.com/exploits/14734
- http://www.securityfocus.com/archive/1/513317/100/0/threaded
- http://www.vupen.com/english/advisories/2010/2174
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6773
- http://secunia.com/advisories/41112
- http://www.exploit-db.com/exploits/14734
- http://www.securityfocus.com/archive/1/513317/100/0/threaded
- http://www.vupen.com/english/advisories/2010/2174
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6773