Description
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks including session takeovers.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zoom Video Communications | Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) | unspecified – < 5.12.2 | 5.12.2 |
| Zoom Video Communications | Zoom VDI Windows Meeting Clients | unspecified – < 5.12.2 | 5.12.2 |
| Zoom Video Communications | Zoom Rooms for Conference Room (for Android, iOS, Linux, macOS, and Windows) | unspecified – < 5.12.2 | 5.12.2 |