Remote Code Execution Vulnerability in TeamSpeak 3 Client by TeamSpeak Systems GmbH
CVE-2019-11351

8.8HIGH

Key Information:

Vendor

Teamspeak

Status
Teamspeak
Vendor
CVE Published:
19 April 2019

What is CVE-2019-11351?

The TeamSpeak 3 Client prior to version 3.2.5 is susceptible to a remote code execution vulnerability due to a flaw in the Qt framework. This allows malicious actors to execute arbitrary code on the affected system, potentially compromising sensitive data and system integrity. Users of TeamSpeak are encouraged to upgrade to the latest version to mitigate these risks.

References

https://forum.teamspeak.com/threads/139546-Release-TeamSp...
x_refsource_MISC
https://github.com/active-labs/Advisories/blob/master/201...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.