Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file.
| Software | From | Fixed in |
|---|---|---|
| teamviewer / teamviewer | 3.6.5523 | 3.6.5523.x |
| teamviewer / teamviewer | - | 5.0.8703.x |
| teamviewer / teamviewer | 4.1.8107 | 4.1.8107.x |
| teamviewer / teamviewer | 1.85 | 1.85.x |
| teamviewer / teamviewer | 2.44 | 2.44.x |