TeamViewer修補兩個新揭露的高風險權限提升漏洞
支付動態 · 2024-09-27
本週TeamViewer揭露兩項高風險漏洞CVE-2024-7479、CVE-2024-7481，攻擊者可在實際接觸到電腦的情況下，用來提升權限。該公司呼籲用戶套用新版程式緩解漏洞
9月25日TeamViewer發布資安公告，指出Windows版應用程式存在兩項高風險漏洞CVE-2024-7479、CVE-2024-7481，這些弱點有可能讓攻擊者提升本機權限，CVSS風險評分皆達到8.8，影響TeamViewer主機端（Host）與客戶端（Full Client）程式，該公司發布15.58.4版應用程式予以修補。
這項漏洞發生的原因，在於遠端桌面軟體元件TeamViewer_service.exe的加密簽章驗證，出現處理不當的情況，使得不具高權限的攻擊者有機會提升權限，並安裝驅動程式。
不過，攻擊者如果想利用這項漏洞，必須先設法進到本機電腦、能夠存取Windows作業系統，才能以此方式提升權限。
熱門文章
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Kazakhstan plans to penalise online casino promotions
Regulation
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
Across 6 Cities: HUIDU Invites You to 8 World Cup Parties Redefining High-Value Social Networking
HUIDU Focus
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
British gambling levy rates confirmed for each vertical
Regulation
