Skip to content
OpenAdvisories
Medium · 4.7 CVE-2021-34420 EUVD-2021-21078GHSA-xcgw-94hj-93r7

Zoom Windows installation executable signature bypass

Published Nov 11, 2021 · Updated Sep 16, 2024 · Assigned by Zoom

Description

The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat extensions. This could lead to a malicious actor installing malicious software on a customer’s computer.

Affected products

VendorProductAffectedFixed
Zoom Video Communications Zoom Client for Meetings for Windows unspecified – < 5.5.4 5.5.4

References