Zoom : Security Vulnerabilities, CVEs, Published In 2017 (Code Execution) CVSS score >= 2
The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.
Max CVSS
9.3
EPSS Score
8.15%
Published
2017-12-19
Updated
2021-05-14
Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.
Max CVSS
8.8
EPSS Score
4.33%
Published
2017-12-19
Updated
2021-05-14
2 vulnerabilities found