Zoom MSI Installer Elevated Write Using A Junction

  • ZSB-21004
  • CVE-2021-34408
  • High
  • 7
  • CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

A user-writable directory created during the installation of the Zoom Client for Meetings for Windows version prior to version 5.3.2 can be redirected to another location using a junction. This would allow an attacker to overwrite files that a limited user would otherwise be unable to modify.

Users can help keep themselves secure by applying current updates or downloading the latest Zoom software with all current security updates from https://zoom.us/download.

  • Zoom Client for Meetings for Windows prior to version 5.3.2

Reported by the Lockheed Martin Red Team

Revision Date Description
1.0 09/30/2021

Initial Publication