Skip to main content

TeamViewer Fixed Critical Vulnerability

A vulnerability in the Team Viewer remote control and meeting software may allow a remote attacker to execute commands on a user’s system.
Threat ID:
CC-1837
Category:
Exploit
Threat Severity:
Low
Threat Vector:
Published:
7 December 2017 12:00 AM
Report a cyber attack: call 0300 303 5222 or email [email protected]

This content has been archived

This article no longer conforms to NHS Digital's standards for cyber alerts, and may contain outdated or inaccurate information. Use of this information contained in this page is at your own risk

Summary

A vulnerability in the Team Viewer remote control and meeting software may allow a remote attacker to execute commands on a user’s system.

Threat details

An attacker can target both server- and client-side Team Viewer or Quick Support installations using a C++ dynamic-link library (DLL) injection. On the server-side this would allow them to “switch sides” and gain control over a user’s device without authorisation; client-side attacks would give full mouse control to the attacker.

Remediation steps

Type Step

Users and administrators are encouraged to check for and apply any updates to their Team Viewer or Quick Support instances. Team Viewer have advised that updates may take several days to appear however. 

 

Last edited: 17 February 2020 11:40 am