CVE-2024-7479

Description

Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.

References

https://github.com/fortra/CVE-2024-7479

https://github.com/PeterGabaldon/CVE-2024-7479_CVE-2024-7481

https://securityonline.info/teamviewer-urges-users-to-patch-privilege-escalation-flaws-cve-2024-7479-and-cve-2024-7481/?&web_view=true

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48397

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS