CVE-2019-13567: OS Command Injection
The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450. If the ZoomOpener daemon (aka the hidden web server) is running, but the Zoom Client is not installed or can't be opened, an attacker can remotely execute code with a maliciously crafted launch URL. NOTE: ZoomOpener is removed by the Apple Malware Removal Tool (MRT) if this tool is enabled and has the 2019-07-10 MRTConfigData.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-13567?
CVE-2019-13567 is a vulnerability in the Zoom Client on macOS that allows remote code execution.
How severe is CVE-2019-13567?
CVE-2019-13567 has a severity rating of 8.8 (high).
Which software versions are affected by CVE-2019-13567?
The Zoom Client before version 4.4.53932.0709 on macOS is affected by CVE-2019-13567.
How can an attacker exploit CVE-2019-13567?
By taking advantage of the ZoomOpener daemon (hidden web server) running without the Zoom Client installed or opened, an attacker can remotely execute code with a malicious payload.
Is there a fix for CVE-2019-13567?
Yes, updating Zoom Client to version 4.4.53932.0709 or newer resolves the vulnerability.