HackAndPwn
Security & Vulnerability Researcher / Professional Penetration Tester

Home

  • CVE-2021-34412

    Zoom for Windows Installer Local Privilege Escalation - During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation.


  • CVE-2021-34411

    Zoom Rooms Installer Local Privilege Escalation - During the installation process for Zoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explorer with elevated privileges. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation.


  • CVE-2021-22038

    On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the originally called uninstaller exits, so it does not block the installation directory). This temporary location is not randomized and does not restrict access to Administrators only so a potential attacker could plant a binary to replace the copied binary right before it gets called, thus gaining Administrator privileges (if the original uninstaller was executed as Administrator). The vulnerability only affects Windows installers.


  • CVE-2021-22037

    Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system command. The full path to the command is not enforced, which results in a search in the search path until a binary can be identified. This makes the installer/uninstaller vulnerable to Path Interception by Search Order Hijacking, potentially allowing an attacker to plant a malicious reg.exe command so it takes precedence over the system command. The vulnerability only affects Windows installers.


  • CVE-2021-34410 - Zoom - Incorrect Permission Assignment for Critical Resource

    Zoom Plugin for Microsoft Outlook (MacOS) Installer Root App Privilege Escalation - A user-writable application bundle unpacked during the install for all versions of the Zoom Plugin for Microsoft Outlook for Mac before 5.0.25611.0521 allows for privilege escalation.



     Page: 5 of 13     
buy me a coffee