Zoom Client CVE-2019-13450 Remote Security Vulnerability

Bugtraq ID:	109082
Class:	Design Error
CVE:	CVE-2019-13450
Remote:	Yes
Local:	No
Published:	Jul 08 2019 12:00AM
Updated:	Jul 08 2019 12:00AM
Credit:	Unknown
Vulnerable:	Zoom Zoom Client 4.4.4
Not Vulnerable:

Zoom Client CVE-2019-13450 Remote Security Vulnerability

Zoom Client is prone to a remote security vulnerability.

An attacker can leverage this issue to bypass security restrictions and perform unauthorized actions. This may aid in further attacks.

Zoom Client version 4.4.4 and prior are vulnerable.

Zoom Client CVE-2019-13450 Remote Security Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

Zoom Client CVE-2019-13450 Remote Security Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Zoom Client CVE-2019-13450 Remote Security Vulnerability

References:

• Twitter (Twitter)
  
• Vulnerability in the Mac Zoom client allows malicious websites to enable camera (Ycombinator)
  
• Zoom Homepage (Zoom)
  
• Zoom Response Video On Vulnerability (Zoom)
  
• Zoom Zero Day: 4+ Million Webcams & maybe an RCE? Just get them to visit your we (Medium)