PT-2017-13835

Name of the Vulnerable Software and Affected Versions Zoom client for Linux versions prior to 2.0.115900.1201 Description The issue concerns the ZoomLauncher binary in the Zoom client for Linux, which does not properly sanitize user input when constructing a shell command. This allows remote...

PT-2017-13834

Name of the Vulnerable Software and Affected Versions Zoom client for Linux versions prior to 2.0.115900.1201 Description The issue is related to a stack-based buffer overflow in the ZoomLauncher binary, which can be exploited by remote attackers to execute arbitrary code. This is achieved by...

CVE-2017-15049: Improper Neutralization of Special Elements used in an OS Command

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

CVE-2017-15048: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...