Vulnerabilities > CVE-2021-34858 - Out-of-bounds Read vulnerability in Teamviewer

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

teamviewer

CWE-125

NVD

Published: 2022-01-13

Updated: 2024-11-21

Summary

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TVS files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13606.

Vulnerable Configurations

Part	Description	Count
Application	Teamviewer Teamviewer Teamviewer - Teamviewer Teamviewer 1.85 Teamviewer Teamviewer 2.44 Teamviewer Teamviewer 3.6.5523 Teamviewer Teamviewer 4.1.8107 Teamviewer Teamviewer 5.0.8703 Teamviewer Teamviewer 5.0.8703_Qs Teamviewer Teamviewer 8.0.226330 Teamviewer Teamviewer 9.0.224135 Teamviewer Teamviewer 9.0.259145 Teamviewer Teamviewer 10.0.2551 Teamviewer Teamviewer 10.0.46203 Teamviewer Teamviewer 10.0.52680 Teamviewer Teamviewer 10.0.134865 Teamviewer Teamviewer 10.0.223995 Teamviewer Teamviewer 10.0.259144 Teamviewer Teamviewer 11.0.90968 Teamviewer Teamviewer 11.0.133222 Teamviewer Teamviewer 11.0.137769 Teamviewer Teamviewer 11.0.214397 Teamviewer Teamviewer 11.0.224042 Teamviewer Teamviewer 11.0.259143 Teamviewer Teamviewer 12.0.92876 Teamviewer Teamviewer 12.0.132598 Teamviewer Teamviewer 12.0.137452 Teamviewer Teamviewer 12.0.181268 Teamviewer Teamviewer 12.0.214399 Teamviewer Teamviewer 12.0.224043 Teamviewer Teamviewer 12.0.259142 Teamviewer Teamviewer 13.0.3057.87385 Teamviewer Teamviewer 13.0.3711.88039 Teamviewer Teamviewer 13.0.5058 Teamviewer Teamviewer 13.0.5640 Teamviewer Teamviewer 13.0.6447 Teamviewer Teamviewer 13.1.1548 Teamviewer Teamviewer 13.2.5287 Teamviewer Teamviewer 13.2.9356 Teamviewer Teamviewer 13.2.14327 Teamviewer Teamviewer 13.2.26558 Teamviewer Teamviewer 13.2.26559 Teamviewer Teamviewer 13.2.36215 Teamviewer Teamviewer 13.2.36216 Teamviewer Teamviewer 13.2.36217 Teamviewer Teamviewer 13.2.36222 Teamviewer Teamviewer 13.36216 Teamviewer Teamviewer 14.0.8346 Teamviewer Teamviewer 14.0.12762 Teamviewer Teamviewer 14.0.13880 Teamviewer Teamviewer 14.1.3399 Teamviewer Teamviewer 14.1.9025 Teamviewer Teamviewer 14.1.18533 Teamviewer Teamviewer 14.2.2558 Teamviewer Teamviewer 14.2.8352 Teamviewer Teamviewer 14.2.56678 Teamviewer Teamviewer 14.3.4730 Teamviewer Teamviewer 14.4.2669 Teamviewer Teamviewer 14.5.1691 Teamviewer Teamviewer 14.5.5819 Teamviewer Teamviewer 14.6.2452 Teamviewer Teamviewer 14.6.4835 Teamviewer Teamviewer 14.7.1965 Teamviewer Teamviewer 14.7.13736 Teamviewer Teamviewer 14.7.48644 Teamviewer Teamviewer 15.0.8397 Teamviewer Teamviewer 15.8.3 Teamviewer Teamviewer 15.16.8.0	66

Common Weakness Enumeration (CWE)

CWE-125 - Out-of-bounds Read

Common Attack Pattern Enumeration and Classification (CAPEC)

Overread Buffers
An adversary attacks a target by providing input that causes an application to read beyond the boundary of a defined buffer. This typically occurs when a value influencing where to start or stop reading is set to reflect positions outside of the valid memory location of the buffer. This type of attack may result in exposure of sensitive information, a system crash, or arbitrary code execution.

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

References