Description (CNA)
Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can leverage this behavior to achieve arbitrary file write and potentially execute code with the privileges of the affected user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TeamViewer / Full Client, Host, QuickSupport & Portable | affected 15.0 before 15.81.5 |
| TeamViewer / Full Client, Host, QuickSupport & Portable (for Windows 7 & 8) | affected 15.64.0 before 15.64.7 |
| TeamViewer / Full Client, Host, QuickSupport (v14 for Windows) | affected 14.0 before 14.7.48833 |
| TeamViewer / Full Client, Host, QuickSupport (v14 for Linux) | affected 14.0 before 14.7.48838 |
| TeamViewer / Full Client, Host, QuickSupport (v14 for macOS) | affected 14.0 before 14.7.48838 |
| TeamViewer / Full Client, Host, QuickSupport & Portable (v13 for Windows) | affected 13.0 before 13.2.36229 |
| TeamViewer / Full Client, Host, QuickSupport (v13 for Linux) | affected 13.0 before 13.2.153978 |
| TeamViewer / Full Client, Host, QuickSupport (v13 for macOS) | affected 13.0 before 13.2.153981 |
CWE
CWE-73
References
ADP enrichment
No English description supplied.
No references supplied.