Description (CNA)
Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update file path. This may result in unauthorized access to sensitive information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TeamViewer / Full Client | affected 11.0.0 before 15.70 |
| TeamViewer / Host | affected 11.0.0 before 15.70 |
CWE
CWE-59
References
ADP enrichment
No English description supplied.
No references supplied.