CVE-2021-34420

Description

The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat extensions. This could lead to a malicious actor installing malicious software on a customer’s computer.

References

https://medium.com/manomano-tech/a-red-team-operation-leveraging-a-zero-day-vulnerability-in-zoom-80f57fb0822e

https://explore.zoom.us/en/trust/security/security-bulletin

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3