CVE-2017-15049
HighSummary
The ZoomLauncher binary in the Zoom client for Linux before version 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, allowing remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.
Risk Assessment
Attackers can remotely execute unauthorized code on the victim's system, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update the Zoom client to the latest version to mitigate this vulnerability and implement additional security measures to monitor and restrict access to the application.
Other vulnerabilities in Zoom client for Linux
Original NVD description (English source)
The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS