“An attacker could embed a malicious iframe in a website with a crafted URL () that would launch the TeamViewer Windows desktop client and force it to open a remote SMB share,” according to an advisory by Jeffrey Hofmann, security engineer at Praetorian, who disclosed the flaw. In this specific case, values are not “quoted” by the app – meaning that TeamViewer will treat them as commands rather than as input values. But because handler applications can receive data from untrusted sources, the URI values passed to the application may contain malicious data that attempts to exploit the app.
The recently discovered flaw stems from the Desktop for Windows app ( CVE-2020-13699) not properly quoting its custom uniform resource identifier (URI) handlers.Īpps need to identify the URIs for the websites they will handle. TeamViewer is a proprietary software application used by businesses for remote-control functionalities, desktop sharing, online meetings, web conferencing and file transfer between computers. If exploited, the flaw could allow remote, unauthenticated attackers to execute code on users’ systems or crack their TeamViewer passwords. I'm hoping the teamviewer team can provide some definitive solution here or adress this problem on an update as soon as possible.Popular remote-support software TeamViewer has patched a high-severity flaw in its desktop app for Windows. Many many people have the same problem as I do, from what I searched. Pretty sure I tried every possible solution on the internet, and no luck. The only workaround I found was typing whatever I wanted on my laptop, copying, and pasting on my PC using mouse. The very strange thing was: whenever I unplug my physical keyboard, on the PC, I'm able to send keys and key combinations from the Teamviewer for about 2 seconds, then completely unable again, be it typing on my laptop keyboard or pressing buttons in the virtual keyboard.
No luck.Ģ) Reinstalled keyboard drives on both sides.Ĥ) Switched on and off the "Send key combinations"Ħ) Plugged and unplugged the physical keyboard. The strange thing is that even when I click the keys using the Virtual Keyboard, the keys are not sent, i'm unable to type anything.ġ) Pressing modifiers multiple times, Alt, Shift, Ctrl and FN. Physical keyboard is perfectly working on both machines. I'm trying to connect to my PC from my Laptop, it was perfectly working until some days ago, now I can't type anything, no keys from keyboard are sent.
0 kommentar(er)
