Zoom Client < 4.6.12 Path Traversal

The version of the Zoom Client installed on the remote host is prior to 4.6.12. It is, therefore, affected by multiple vulnerabilities : - A path traversal vulnerability exists in the Zoom Client in the message processing. An unauthenticated, remote attacker can exploit this, by sending a special...

Zoom Client Arbitrary File Write (CVE-2020-6109)

An arbitrary file write vulnerability exists in Zoom Client. Successful exploitation of this vulnerability could result in code execution on the affected system...

CVE-2020-6109

An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A specially crafted chat message can cause an arbitrary file write, which could potentially be abused to achieve arbitrary code execution. An attacker needs to send a...

CVE-2020-6109

An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A specially crafted chat message can cause an arbitrary file write, which could potentially be abused to achieve arbitrary code execution. An attacker needs to send a...

CVE-2020-6109

CVE-2020-6109 affects Zoom Client prior to 4.6.12 (notably 4.6.10) where a crafted chat message can trigger a path traversal in message processing, allowing arbitrary file write and potential code execution. The vulnerability exists when processing messages (including animated GIFs) sent by a rem...

KLA11803 Path traversal vulnerabilities in Zoom

Path traversal vulnerabilities were found in Zoom. Malicious users can exploit this vulnerabilities to execute arbitrary code. Original advisories Talos Blog for Zoom CVE-2020-6109 CVE-2020-6110 Related products Zoom-MSI CVE list CVE-2020-6109 critical CVE-2020-6110 high Solution Update to the...