Those users who have configured TeamViewer to accept automatic updates will get the patch delivered automatically however, it could take up to three to seven days for the patches before the update is installed. “Once you’ve made the request to switch controls there is no additional check on the server-side before it grants you access.” “Once the code is injected into the process it’s programmed to modify the memory values within your own process that enables GUI elements that give you the options to switch control of the session,” Gellin told Threat Post. To do so, the bug requires both users to first be authenticated and then the attacker needs to inject the PoC code into their own process with a tool such as a DLL injector or some type of code mapper. This vulnerability could be exploited to gain control of the presenter’s session or the viewer’s session without permission.

If the Client is an attacker – it will allow the client-side to take control of the mouse and keyboard of the server-side, ignoring any control settings or permissions on the server-side.

Most useful so far to enable the “switch sides” feature which is normally only active after you have already authenticated control with the client, and initiated a change of control/sides.

If Server is an attacker – Enables extra menu item options on the right side pop-up menu.The code can be used on both the client and server-side. TeamViewer too went on to acknowledge the existence of the vulnerability after it was publicly disclosed.Īccording to the PoC released by Gellin, it showed how one could modify TeamViewer permissions via a simple injectable C++ DLL, which controls “naked inline hooking and direct memory modification to change TeamViewer permissions.”

The vulnerability was first publicized by a Reddit user “xpl0yt” on Monday who linked it to a Proof-of-Concept (POC) published on GitHub by a user named “gellin”.

Teamviewer scams reddit