CVE-2017-15049

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

CVE-2017-15048

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

Command injection

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

CVE-2017-15049

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

CVE-2017-15049: Improper Neutralization of Special Elements used in an OS Command

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

CVE-2017-15048: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

PT-2017-13834

Name of the Vulnerable Software and Affected Versions Zoom client for Linux versions prior to 2.0.115900.1201 Description The issue is related to a stack-based buffer overflow in the ZoomLauncher binary, which can be exploited by remote attackers to execute arbitrary code. This is achieved by...

PT-2017-13835

Name of the Vulnerable Software and Affected Versions Zoom client for Linux versions prior to 2.0.115900.1201 Description The issue concerns the ZoomLauncher binary in the Zoom client for Linux, which does not properly sanitize user input when constructing a shell command. This allows remote...

Zoom Linux Client Command Injection Vulnerability

Zoom client for Linux is a Linux-based is a Linux-based video conferencing endpoint from Zoom, Inc. A security vulnerability exists in the ZoomLauncher binary in versions prior to Zoom client 2.0.115900.1201 for Linux-based platforms, which stems from the program not properly filtering user input...