Zoom Client Installer Local Privilege Escalation

Vulnerability

The installation packages of Zoom Client for Meetings for MacOS (Standard and IT Admin) before version 5.2.0, Zoom Client Plugin for Sharing iPhone/iPad before version 5.2.0, and Zoom Rooms for Conference before version 5.1.0 copy pre- and post- installation shell scripts to a user-writable directory [1]. This allows a local attacker to modify these scripts or replace them with malicious content.

Exploitation

An attacker with local access to the user's machine can replace or modify the shell scripts that are executed with elevated privileges during the installation process [1]. No additional authentication is required beyond local file system access.

Impact

A successful exploit could allow the attacker to execute arbitrary system commands in a higher privileged context (likely root) during the installation [1], leading to full compromise of the system.

Mitigation

Update to Zoom Client for Meetings version 5.2.0 or later, Zoom Client Plugin for Sharing iPhone/iPad version 5.2.0 or later, and Zoom Rooms for Conference version 5.1.0 or later [1]. No workarounds are mentioned.