Back to CVE Browser

CVE-2019-13567

HIGH

8.8

CVSS Severity Score

EPSS Score0.0240%

EPSS Percentile4.41th

PublishedJul 12, 2019

Last ModifiedNov 21, 2024

Vulnerability Description

The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450. If the ZoomOpener daemon (aka the hidden web server) is running, but the Zoom Client is not installed or can't be opened, an attacker can remotely execute code with a maliciously crafted launch URL. NOTE: ZoomOpener is removed by the Apple Malware Removal Tool (MRT) if this tool is enabled and has the 2019-07-10 MRTConfigData.

Affected Platforms (CPE)

📦

Zoom

Zoom

< 4.4.53932.0709

References & Advisories

🔗 https://gist.github.com/wbowling/13f9f90365c171806b9ffba2c841026b

🔗 https://support.zoom.us/hc/en-us/articles/201361963-New-Updates-for-Mac-OS

🔗 https://twitter.com/JLLeitschuh/status/1149420685405708295

🔗 https://twitter.com/JLLeitschuh/status/1149422543658520578

🔗 https://twitter.com/riskybusiness/status/1149125147019767814

🔗 https://twitter.com/wcbowling/status/1149457231504498689

🔗 https://twitter.com/wcbowling/status/1166998107667619841

🔗 https://gist.github.com/wbowling/13f9f90365c171806b9ffba2c841026b

Related Vulnerabilities

CVE-2004-068010.0

Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the...

CVE-2019-1981010.0

Zoom Call Recording 6.3.1 from Eleveo is vulnerable to Java Deserialization attacks targeting the inbuilt RMI service. A remote un...

CVE-2019-162739.8

DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb), leading to arbitra...

CVE-2018-204019.8

Zoom 5352 v5.5.8.6Y devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4....