Information Disclosure Vulnerability in TeamViewer Software by TeamViewer GmbH

CVE-2021-35005

What is CVE-2021-35005?

This vulnerability allows local attackers to disclose sensitive information on systems running affected versions of TeamViewer. To exploit this vulnerability, an attacker must first execute low-privileged code on the target system. The flaw exists in the TeamViewer service due to improper validation of user-supplied data, enabling a read past the end of an allocated array. Attackers can potentially utilize this vulnerability alongside others to execute arbitrary code at the SYSTEM level, posing a significant risk to system integrity and confidentiality.

References