Unscored severity · published Aug 26, 2010
CVE-2010-3128
Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking…
–
CVSS
8.4%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.4% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TE
Teamviewer · Teamviewer
through 5.0.8703; 1.85; 2.44; 3.6.5523; 4.1.8107 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3128
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3128
Vendor Advisory
http://secunia.com/advisories/41112
Exploit
http://www.exploit-db.com/exploits/14734
www.securityfocus.com
http://www.securityfocus.com/archive/1/513317/100/0/threaded
Vendor Advisory
http://www.vupen.com/english/advisories/2010/2174
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6773
More from Teamviewer
7.0
CVE-2019-18988
TeamViewer Desktop Bypass Remote Login Vulnerability
9.8
CVE-2018-16550
TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes it easier to…
8.8
CVE-2021-34859
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0
8.8
CVE-2020-13699
TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers
8.8
CVE-2019-18251
In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS