This host is installed with TeamViewer and is prone to insecure library loading vulnerability.

Successful exploitation will allow attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file. Impact Level: Application.

Update to version 5.0.9104 or later, For updates refer to http://www.teamviewer.com/index.aspx

The flaw is due to the application insecurely loading certain librairies from the current working directory.

TeamViewer version 5.0.8703 and prior

• http://secunia.com/advisories/41112
• http://www.exploit-db.com/exploits/14734/
• http://www.vupen.com/english/advisories/2010/2174

---

Updated on 2015-03-25