返回 CVE 浏览器

CVE-2010-3128

CRITICAL

9.3

CVSS Severity Score

EPSS Score0.1250%

EPSS Percentile42.24th

Published2010年8月26日

Last Modified2026年4月29日

Vulnerability Description

Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file.

Affected Platforms (CPE)

📦

Teamviewer

Teamviewer

<= 5.0.8703

📦

Teamviewer

Teamviewer

= 1.85

📦

Teamviewer

Teamviewer

= 2.44

📦

Teamviewer

Teamviewer

= 3.6.5523

📦

Teamviewer

Teamviewer

= 4.1.8107

References & Advisories

🔗 http://secunia.com/advisories/41112

🔗 http://www.exploit-db.com/exploits/14734

🔗 http://www.securityfocus.com/archive/1/513317/100/0/threaded

🔗 http://www.vupen.com/english/advisories/2010/2174

🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6773

🔗 http://secunia.com/advisories/41112

🔗 http://www.exploit-db.com/exploits/14734

🔗 http://www.securityfocus.com/archive/1/513317/100/0/threaded

相关漏洞威胁

CVE-2018-165509.8

TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the...

CVE-2019-182518.8

In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version o...

CVE-2020-136998.8

TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch Tea...

CVE-2021-348598.8

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0. User inter...