An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. (The vendor states that it…
mitre·CWE-212·Published 2019-12-02
An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. (The vendor states that it was later fixed.) Upon login, every communication is saved within Windows main memory. When a user logs out or deletes conversation history (but does not exit the application), this data is not wiped from main memory, and therefore could be read by a local user with the same or greater privileges.
An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. (The vendor states that it was later fixed.) Upon login, every communication is saved within Windows main memory. When a user logs out or deletes conversation history (but does not exit the application), this data is not wiped from main memory, and therefore could be read by a local user with the same or greater privileges.
Se detectó un problema en la funcionalidad Chat de la aplicación de escritorio TeamViewer versión 14.3.4730 en Windows. (El proveedor declara que luego fue corregido). Tras iniciar sesión, cada comunicación es guardada en la memoria principal de Windows. Cuando un usuario cierra sesión o elimina el historial de conversación (pero no sale de la aplicación), estos datos no son borrados de la memoria principal y, por lo tanto, un usuario local puede leerlos con los mismos o mayores privilegios.
| Version | Type | Source | Base | Exp | Impact | Vector |
|---|---|---|---|---|---|---|
| 2.0 | Primary | NVD | 4.0 | 8.0 | 2.9 | AV:N/AC:L/Au:S/C:P/I:N/A:N |
| 3.0 | Primary | cve.org | 4.3 | — | — | CVSS:3.0/AC:L/AV:P/A:N/C:H/I:N/PR:L/S:U/UI:N |
| 3.0 | Primary | cve.org | 4.3 | — | — | CVSS:3.0/AC:L/AV:P/A:N/C:H/I:N/PR:L/S:U/UI:N |
| 3.0 | Secondary | NVD | 4.3 | 0.7 | 3.6 | CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| 3.1 | Primary | NVD | 6.5 | 2.8 | 3.6 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |