Improper Validation of File Paths in TeamViewer Desktop Clients
Improper
neutralization of path traversal sequences in TeamViewer Desktop Clients prior
Version 15.81.5 allows an authenticated remote session participant to write files
to unintended locations on the local file system via file transfer or virtual
file clipboard mechanisms. An attacker can leverage this behavior to achieve
arbitrary file write and potentially execute code with the privileges of the
affected user.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Full Client, Host, QuickSupport & Portable
Vendor
TeamViewer
Product
Full Client, Host, QuickSupport & Portable
Platforms
Windows
MacOS
Linux
Default status
unaffected
Full Client, Host, QuickSupport & Portable · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
15.0
affected
custom
15.81.5
Unavailable
None listed
Full Client, Host, QuickSupport & Portable (for Windows 7 & 8)
Vendor
TeamViewer
Product
Full Client, Host, QuickSupport & Portable (for Windows 7 & 8)
Platforms
Windows
Default status
unaffected
Full Client, Host, QuickSupport & Portable (for Windows 7 & 8) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
15.64.0
affected
custom
15.64.7
Unavailable
None listed
Full Client, Host, QuickSupport (v14 for Windows)
Vendor
TeamViewer
Product
Full Client, Host, QuickSupport (v14 for Windows)
Platforms
Windows
Default status
unaffected
Full Client, Host, QuickSupport (v14 for Windows) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
14.0
affected
custom
14.7.48833
Unavailable
None listed
Full Client, Host, QuickSupport (v14 for Linux)
Vendor
TeamViewer
Product
Full Client, Host, QuickSupport (v14 for Linux)
Platforms
Linux
Default status
unaffected
Full Client, Host, QuickSupport (v14 for Linux) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
14.0
affected
custom
14.7.48838
Unavailable
None listed
Full Client, Host, QuickSupport (v14 for macOS)
Vendor
TeamViewer
Product
Full Client, Host, QuickSupport (v14 for macOS)
Platforms
MacOS
Default status
unaffected
Full Client, Host, QuickSupport (v14 for macOS) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
14.0
affected
custom
14.7.48838
Unavailable
None listed
Full Client, Host, QuickSupport & Portable (v13 for Windows)
Vendor
TeamViewer
Product
Full Client, Host, QuickSupport & Portable (v13 for Windows)
Platforms
Windows
Default status
unaffected
Full Client, Host, QuickSupport & Portable (v13 for Windows) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
13.0
affected
custom
13.2.36229
Unavailable
None listed
Full Client, Host, QuickSupport (v13 for Linux)
Vendor
TeamViewer
Product
Full Client, Host, QuickSupport (v13 for Linux)
Platforms
Linux
Default status
unaffected
Full Client, Host, QuickSupport (v13 for Linux) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
13.0
affected
custom
13.2.153978
Unavailable
None listed
Full Client, Host, QuickSupport (v13 for macOS)
Vendor
TeamViewer
Product
Full Client, Host, QuickSupport (v13 for macOS)
Platforms
MacOS
Default status
unaffected
Full Client, Host, QuickSupport (v13 for macOS) · Scoped product and version facts