TeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] and "[00 00 00]" delimiters, which might make it easier for attackers to obtain sensitive information by leveraging an unattended workstation on which TeamViewer has disconnected but remains running.
References
Link | Resource |
---|---|
https://github.com/vah13/extractTVpasswords | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-07-16 19:29
Updated : 2018-09-17 12:51
NVD link : CVE-2018-14333
Mitre link : CVE-2018-14333
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
teamviewer
- teamviewer