2 matches found
Code injection
The Zoom IT installer for Windows ZoomInstallerFull.msi prior to version 4.6.10 deletes files located in %APPDATA%\Zoom before installing an updated version of the client. Standard users are able to write to this directory, and can write links to other directories on the machine. As the installer...
8.5CVSS8AI score0.01539EPSS
SaveExploits0References3Affected Software1
CVE-2020-11443: Improper Link Resolution Before File Access
The Zoom IT installer for Windows ZoomInstallerFull.msi prior to version 4.6.10 deletes files located in %APPDATA%\Zoom before installing an updated version of the client. Standard users are able to write to this directory, and can write links to other directories on the machine. As the installer...
8.5CVSS7.5AI score0.01539EPSS
SaveExploits0References3
20