CVE-2019-13567

The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450

published July 12, 2019

CVSS
—
EPSS
4%
Percentile
89.9
In the wild
Unconfirmed
What it is

The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450. If the ZoomOpener daemon (aka the hidden web server) is running, but the Zoom Client is not installed or can't be opened, an attacker can remotely execute code with a maliciously crafted launch URL. NOTE: ZoomOpener is removed by the Apple Malware Removal Tool (MRT) if this tool is enabled and has the 2019-07-10 MRTConfigData.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03797 · 89.9th percentile
Published
2019-07-12T03:00Z
EPSS history
Timeline
  • 12 JUL 03:00Z
    The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450
    cvelistv5