ID de Prueba:	1.3.6.1.4.1.25623.1.0.117714
Categoría:	Privilege escalation
Título:	Zoom Client < 5.0.4 Privilege Escalation Vulnerability (ZSB-20002) - Windows
Resumen:	Zoom Client is prone to a privilege escalation vulnerability.
Descripción:	Summary: Zoom Client is prone to a privilege escalation vulnerability. Vulnerability Insight: A vulnerability related to Dynamic-link Library ('DLL') loading in the Zoom Sharing Service could allow a local Windows user to escalate privileges to those of the NT AUTHORITY/SYSTEM user. The vulnerability is due to insufficient signature checks of dynamically loaded DLLs when loading a signed executable. An attacker could exploit this vulnerability by injecting a malicious DLL into a signed Zoom executable and using it to launch processes with elevated permissions. Affected Software/OS: Zoom Client versions prior to 5.0.4 on Windows. Solution: Update to version 5.0.4 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-9767
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.