Installation-freeĪs this is portable software we're talking about, no installation is required. Easy to set up and use, this is a portable piece of software that makes it easy for both the host and the guest to establish a connection. The program has evolved over time to be even easier to use for the more uninitiated users, and TeamViewer QuickSupport is a step in that direction. The host sets up the tool, and provides the IDs for the guest to log in, granting said guest access to their computer. So, users are highly recommended to upgrade their software to the 15.8.3, as it's hardly a matter of time before hackers started exploiting the flaw to hack into users' Windows PCs.Ī similar SMB-authentication attack vector was previously disclosed in Google Chrome, Zoom video conferencing app, and Signal messenger.TeamViewer is a tool that is pretty closely synonymous with tech support, and though it also happens to be the software of choice for some devious scamming acts, the tool is generally well-regarded whenever the topic of remote access is brought up. Though the vulnerability is not being exploited in the wild as of now, considering the popularity of the software among millions of users, TeamViewer has always been a target of interest for attackers.
The TeamViewer project has patched the vulnerability by quoting the parameters passed by the affected URI handlers e.g., URL:teamviewer10 Protocol "C:\Program Files (x86)\TeamViewer\TeamViewer.exe" "%1" This vulnerability, categorized as 'Unquoted URI handler,' affects "URI handlers teamviewer10, teamviewer8, teamviewerapi, tvchat1, tvcontrol1, tvfiletransfer1, tvjoinv8, tvpresent1, tvsendfile1, tvsqcustomer1, tvsqsupport1, tvvideocall1, and tvvpn1," Hofmann said.
Now, the victim's Windows OS will "perform NTLM authentication when opening the SMB share and that request can be relayed (using a tool like responder) for code execution (or captured for hash cracking)."
0 kommentar(er)
