Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow

Overview

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.

Affected

• full_client < 15.83
• full_client >= 15.64.0 (Legacy Windows 7 & 8) < 15.64.10 (Legacy Windows 7 & 8)
• full_client >= 14.7.0 (Windows) < 14.7.48868 (Windows)
• full_client >= 14.7.0 (Linux) < 14.7.48868 (Linux)
• full_client >= 14.7.0 (macOS) < 14.7.48868 (macOS)
• full_client >= 13.2.0 (Windows) < 13.2.36231 (Windows)
• full_client >= 13.2.0 (Linux) < 13.2.154008 (Linux)
• full_client >= 13.2.0 (macOS) < 13.2.154007 (macOS)
• Portable < 15.83
• Portable >= 15.64.0 (Legacy Windows 7 & 8) < 15.64.10 (Legacy Windows 7 & 8)
• remote_control < 15.83

Remediation

Update to the latest available version.