CVE-2021-34413: High severity zoom zoom plugin for microsoft outlook vulnerability
Published Sep 27, 2021
·Updated
All versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a Time-of-check Time-of-use (TOC/TOU) vulnerability during the plugin installation process. This could allow a standard user to write their own malicious application to the plugin directory, allowing the malicious application to execute in a privileged context.
Affected Software
1 affected component
Zoom Zoom Plugin For Microsoft Outlook Windows<5.3.52553.0918
Event History
Sep 27, 2021
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Zoom Plugin for Microsoft Outlook vulnerability?
The vulnerability ID is CVE-2021-34413.
2
What is the affected software?
The affected software is the Zoom Plugin for Microsoft Outlook for MacOS versions before 5.3.52553.0918.
3
What is the severity of CVE-2021-34413?
The severity of CVE-2021-34413 is high with a score of 7.5.
4
What is the CWE (Common Weakness Enumeration) ID for this vulnerability?
The CWE ID for this vulnerability is 367.
5
How can I fix this vulnerability?
To fix this vulnerability, update the Zoom Plugin for Microsoft Outlook for MacOS to version 5.3.52553.0918 or later.