PT-2019-13427 · Zoom · Zoom Client

Vakzz · Publicado 2019-07-12 · Atualizado 2020-08-24 · CVE-2019-13567

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoom Client versions prior to 4.4.53932.0709

Description The issue allows remote code execution if the ZoomOpener daemon is running but the Zoom Client is not installed or cannot be opened. An attacker can exploit this by using a maliciously crafted launch URL. The ZoomOpener daemon can be removed by the Apple Malware Removal Tool (MRT) if it is enabled and has the 2019-07-10 MRTConfigData.

Recommendations For Zoom Client versions prior to 4.4.53932.0709, update to version 4.4.53932.0709 or later to resolve the issue. As a temporary workaround, consider disabling the ZoomOpener daemon until a patch is available. Restrict access to any launch URLs that could potentially exploit the vulnerability to minimize the risk of exploitation.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2019-13567

Produtos afetados

Zoom Client

Referências · 10

• 🔥 https://twitter.com/wcbowling/status/1149457231504498689 · Exploit
• https://twitter.com/wcbowling/status/1166998107667619841 · Nota
• https://twitter.com/riskybusiness/status/1149125147019767814 · Nota
• https://osv.dev/vulnerability/CVE-2019-13567 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-13567 · Nota de Segurança
• https://gist.github.com/wbowling/13f9f90365c171806b9ffba2c841026b · Nota
• https://t.me/thehackernews/380 · Publicação no Telegram
• https://support.zoom.us/hc/en-us/articles/201361963-New-Updates-for-Mac-OS · Aviso do Fabricante
• https://twitter.com/JLLeitschuh/status/1149422543658520578 · Nota
• https://twitter.com/JLLeitschuh/status/1149420685405708295 · Nota