Today we are releasing some updates for TeamViewer 8 through 15, for the Windows platform.
We implemented some improvements in URI handling relating to CVE 2020-13699.
Please see our Change Logs here.
Nota Bene: Thank you, Jeffrey Hofmann with Praetorian, for your professionalism and following a responsible disclosure model. We are grateful that you reached out to us and that you could confirm the fix of your findings in the latest release.
All the best,
Thanks for your post.
Meanwhile, the CVE-details have been released.
As always, we recommend updating to the latest version to benefit from the latest security patches.
Thanks and best,
We recommend to update all TeamViewer installation to the latest version. For TeamViewer 10 the patched version number is v10.0.258873.
Thanks and best,
We are on version 11.x Do we need an update for TV_Hosts and TV-Quick-Support?
Will updated files be available for download in the TeamViewer Management Console?
Those files are last updated on the 13th of July.
All fresh downloads from within the Management Console should get the latest version automatically (=get.teamviewer.com/yourlink...).
The Management Console will offer you the update if you still have older versions in there via a banner that appears in the Design & Deploy tab.
That means, the next time, your customers are starting your customized modues, they should get the new version automatically.
If you deployed your Hosts via MSI, please make a new deployment with the updated Host as the MSI does not include an update feature.
Regular installed Hosts and full versions, having Automatic update enabled within the options, should already have received the update.
@junxian_li I am checking internally with the team and get back to you soonest why the PopUp does not show the correct version number.
Thanks and best,
this public Host-Installer from https://download.teamviewer.com/download/version_11x/TeamViewer_Host_Setup.exe is still an old version from last month (13th July). Will there be an update for re-deployment?
When downloading it, it gives me the correct version (Sorry for the screenshot in German):
Can you check again?
Thanks for your patience.
Would you mind to test the download again and see whether the PopUp now offers the correct version 10?
I am looking forward to your feedback.
Thanks and best, Esther
@Esther The CVE indicates the vulnerability applies to version 15.8.3 also. When I attempt to update through the TV client it indicates I don't have an update, 15.8.3 is the latest available and the date on that is July 20th.
Oh -where did you read that?
But no worries - TeamViewer 15.8.3 includes the patch for the CVE - see the versions Change Log.
We also released new versions for TeamViewer 8, 9, 10,11, 12, 13, 14.2 and 14.7 to address the topic.
Does TeamViewer 15.8.3 for Windows update require older versions of TeamViewer to also update due to fix in URI handling? We are receiving error when connecting from TeamViewer 15 to TeamViewer 11 Host which should be backwards compatible.
"The remote TeamViewer is running an old version which is out of date. Therefore you cannot connect to this Version anymore."
The message you got indicates that you have not been signed in with your licensed TeamViewer account when trying to start the connection as connections to older TeamViewer versions require a license.
After logging in to your Computers & Contacts list you should be able to connect again.
Still - we recommend updating all endpoints to the latest version (not necessarily to TeamViewer 15, but within their version). There is an update for TeamViewer 11 available. See its Change Log here: [Windows] v11.0.258870 - Change Log
I hope this info helps you.
Could somebody of TeamViewer Team explain/elaborate about:
Does the problem concern the program on the side initiating the connection or also the program on the side hosting/sharing the remote desktop.
I need to know whether I should update it also on remote computer stations or only locally in my office on all my local workstation which will connect to our remote clients (my company mainly deals with IT Support for our clients/customers).
We recommend updating your local devices as well as the remote devices to apply the patch.
Thanks for the question: yes - all installations 👍
as this is very important things to do I want to refresh one question which was discussed in this following IDEAS/FeatureRequest:
Ask how I can get the list of remote host where TV program is outdated ?
Is it possible with any TeamViewer tools/api ?