CVE-2017-15048

High

Published: 19/12/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before version 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.

Risk Assessment

Attackers can remotely take control of the system, posing a serious threat to the security of organizational data and infrastructure.

Recommendation

It is recommended to update the Zoom client to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in Zoom client for Linux

CVE-2017-15049High
The ZoomLauncher binary in the Zoom client for Linux before version 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, allowing remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.

Original NVD description (English source)

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS