Description (CNA)
A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user interaction by clicking the malicious link.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TeamViewer / Full Client | affected 15.0 before 15.81.5; affected 14.0 before 14.7.488838; affected 13.0 before 13.2.153978 |
| TeamViewer / Host | affected 15.0 before 15.81.5; affected 14.0 before 14.7.488838; affected 13.0 before 13.2.153978 |
CWE
CWE-78
References
ADP enrichment
No English description supplied.
No references supplied.