Friday, 24 March, 2023

Zoom patches vulnerability chain that could lead to remote code execution

<p>Zoom users should update to version 5.10.0 to fix a number of security flaws discovered by Google Project Zero security researcher Ivan Fratric. Clients were prompted to connect to a man-in-the-middle server that served up an old version of the Zoom client from mid-2019 after receiving a specially crafted message. Zoom also discovered a technique to send user session cookies to a non-Zoom site, which could allow for spoofing, according to its security alert.</p> <p>&nbsp;</p>