Improper URL parsing in Zoom Clients

Vulnerability

The Zoom Client for Meetings versions prior to 5.11.0 on Android, iOS, Linux, macOS, and Windows contain a URL parsing vulnerability. When a user opens a maliciously crafted Zoom meeting URL, the client may incorrectly parse the link, directing the connection to an arbitrary network address. This affects all versions before 5.11.0.

Exploitation

An attacker must craft a malicious Zoom meeting URL and trick a user into opening it, typically via phishing or social engineering. No authentication is required, but user interaction is necessary. The attacker can specify an arbitrary network address, such as a server under their control, to which the Zoom client will attempt to connect.

Impact

Successful exploitation can lead to the user connecting to an attacker-controlled network address, enabling further attacks. The vulnerability has the potential for remote code execution through launching executables from arbitrary paths, as the attacker could serve malicious content that executes on the victim's system.

Mitigation

Zoom released version 5.11.0 to fix this vulnerability. Users should update to the latest version as recommended in the Zoom Security Bulletin [1]. No workarounds are currently available.