copyright | disclaimer | privacy | contact  
Australia's Leading Computer Emergency Response Team
 
Search this site

 
On this site

 > HOME
 > About AusCERT
 > Membership
 > Contact Us
 > PKI Services
 > Publications
 > Sec. Bulletins
 > Conferences
 > News & Media
 > Services
 > Web Log
 > Site Map
 > Site Help
 > Member login





 

ASB-2012.0107 - [Win][Linux][OSX] TeamViewer: Reduced security - Unknown/unspecified

Date: 26 July 2012

Click here for printable version
Click here for PGP verifiable version
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
                         AUSCERT Security Bulletin

                               ASB-2012.0107
        Vulnerabilities have been identified in TeamViewer prior to
                versions 7.0.13989, 6.0.13992 and 5.1.13999
                               26 July 2012

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:              TeamViewer
Operating System:     Windows
                      Mac OS X
                      Linux variants
Impact/Access:        Reduced Security -- Unknown/Unspecified
Resolution:           Patch/Upgrade
Member content until: Saturday, August 25 2012

OVERVIEW

        An unknown number of vulnerabilities have been identified in TeamViewer
        prior to versions 7.0.13989, 6.0.13992 and 5.1.13999.


IMPACT

        The vendor has not provided details regarding the vulnerabilities but
        states "This is a highly recommended security update". [1]


MITIGATION

        The vendor recommends upgrading to the latest releases of TeamViewer to
        correct these issues.


REFERENCES

        [1] TeamViewer Changelog
            http://www.teamviewer.com/en/download/changelog.aspx

AusCERT has made every effort to ensure that the information contained
in this document is accurate.  However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours 
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=It/n
-----END PGP SIGNATURE-----