CVE-2017-15049

8.8

HIGHCVSS v3

Published

December 19, 2017

CVSS v2

9.3 HIGH

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.

zoom

NPMLike hapijs boom but for non-error return data

< 2.0.115900.1201NVD

zoom

Crates.ioA particle physics library with extensive generics

< 2.0.115900.1201NVD

zoom

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

Ruby/ZOOM provides a Ruby binding to the Z39.50 Object-Orientation Model (ZOOM), an abstract object-oriented programming interface to a subset of the services specified by the Z39.50 standard, also known as the international standard ISO 23950. This version introduces ZOOM Extended Services.

< 2.0.115900.1201NVD

zoom

Python Package IndexDistributed project management

< 2.0.115900.1201NVD

Security Advisories

CVE-2017-15049

Description

More on this CVE