CVE-2017-15049

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which…

published December 19, 2017

CVSS
—
EPSS
17%
Percentile
97.1
In the wild
Unconfirmed
What it is

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.17048 · 97.1th percentile
Published
2017-12-19T15:00Z
EPSS history
Timeline
  • 19 DEC 15:00Z
    The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which…
    cvelistv5