CVE-2020-13699: Improper Neutralization of Argument Delimiters in a Command

TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitrary parameters, as demonstrated by a teamviewer10: --play URL. An attacker could force a victim to send an NTLM authentication request and either...

PT-2020-3665

Name of the Vulnerable Software and Affected Versions TeamViewer Desktop for Windows versions prior to 15.8.3 TeamViewer versions 8.0 through 14.7 Description The issue is related to TeamViewer's custom URI handlers not being properly quoted, allowing a malicious website to launch TeamViewer with...