CVE-2017-15049

PoC ×4—

CVSS 3.1

8.8 high

EPSS

17%p97

Published

Dec 19, 2017 (Dec 19, 2017)

Modified

Jun 17, 2026

Description

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.

Vendors: zoom
Products: zoom
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (17.0%)

In the news0 stories

No ingested article mentions this CVE yet.