TeamViewer Installer Rollback Race Condition Leads to Privilege Escalation

Executive Summary

TeamViewer Full Client and Host for Windows before version 15.82 have a race condition in the installer rollback process. A local low-privileged attacker could replace backup files in a temporary directory before they are restored by an elevated installer, leading to privilege escalation to SYSTEM level.

Useful 0 Not Useful 0

Detection Guidance

Detection involves checking for vulnerable TeamViewer versions prior to 15.82 on Windows. Inspect installed versions via registry or program files. No specific commands are provided in the context.

Useful 0 Not Useful 0

Impact Analysis

An attacker with local access could gain full system control on affected machines during software updates or installations. This could allow them to install malware, steal data, or perform other malicious actions with highest privileges.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized system access, potentially violating data protection requirements in GDPR and HIPAA. Organizations using vulnerable TeamViewer versions may face compliance violations if exploited.

Useful 0 Not Useful 0

Mitigation Strategies

Update TeamViewer Full Client and Host to version 15.82 or later. Ensure no rollback files exist in user-writable temporary directories during installation.

Useful 0 Not Useful 0