EUVD-2020-3797

Malware in sbrugna...

Zoom IT installer unauthorized operation vulnerability

Zoom IT is a screen zoom and annotation tool for technical presentations from Zoom USA. A security vulnerability exists in versions of Zoom IT installer ZoomInstallerFull.msi prior to 4.6.10 for Windows-based platforms. An attacker can exploit the vulnerability to delete restricted files...

CVE-2020-11443

The Zoom IT installer for Windows ZoomInstallerFull.msi prior to version 4.6.10 deletes files located in %APPDATA%\Zoom before installing an updated version of the client. Standard users are able to write to this directory, and can write links to other directories on the machine. As the installer...

CVE-2020-11443

The vulnerability CVE-2020-11443 affects the Zoom IT Windows installer (ZoomInstallerFull.msi) prior to version 4.6.10. The installer runs with SYSTEM privileges and deletes files under %APPDATA%\Zoom by following user-writable links to other directories, enabling a user to delete files they norm...

CVE-2020-11443: Improper Link Resolution Before File Access

The Zoom IT installer for Windows ZoomInstallerFull.msi prior to version 4.6.10 deletes files located in %APPDATA%\Zoom before installing an updated version of the client. Standard users are able to write to this directory, and can write links to other directories on the machine. As the installer...