Lucene search
K

5 matches found

OSV
OSV
added 2017/12/19 3:29 p.m.1 views

CVE-2017-15049

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

8.8CVSS6.1AI score
Exploits0References4
OSV
OSV
added 2017/12/19 3:29 p.m.1 views

CVE-2017-15048

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

8.8CVSS6.4AI score0.12887EPSS
Exploits5References4
Prion
Prion
added 2017/12/19 3:29 p.m.16 views

Command injection

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

9.3CVSS9AI score0.16977EPSS
Exploits5References4Affected Software1
Cvelist
Cvelist
added 2017/12/19 3:0 p.m.17 views

CVE-2017-15049

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler...

9AI score0.16977EPSS
Exploits5References4
CNVD
CNVD
added 2017/12/18 12:0 a.m.1 views

Zoom Linux Client Command Injection Vulnerability

Zoom client for Linux is a Linux-based is a Linux-based video conferencing endpoint from Zoom, Inc. A security vulnerability exists in the ZoomLauncher binary in versions prior to Zoom client 2.0.115900.1201 for Linux-based platforms, which stems from the program not properly filtering user input...

9.3CVSS7.4AI score0.16977EPSS
Exploits5References1
Rows per page
Query Builder