Remote support software company TeamViewer released a patch to address a vulnerability that allows users sharing a desktop session to gain control of the others computer without permission. The flaw was first reported by the user xpl0yt early this week, he also linked to a proof-of-concept injectable C++ dll that uses naked inline hooking and direct hooking to change teamViewer permissions. The attacker would have to inject the PoC code into their own process with a tool such as a DLL.”]
Source: http://securityaffairs.co/wordpress/66397/hacking/team-viewer-bug.html