![]() ![]() Though the installer requires a user to enter their password on first adding the application to the system, Wardle found that an auto-update function then continually ran in the background with superuser privileges. The exploit works by targeting the installer for the Zoom application, which needs to run with special user permissions to install or remove the main Zoom application from a computer. Zoom has already fixed some of the bugs involved, but the researcher also presented one unpatched vulnerability that still affects systems now. According to The Verge, details of the exploit were released in a presentation by Mac security specialist Patrick Wardle at the Def Con hacking conference in Las Vegas this week. ![]() ![]() Meanwhile, last week a security researcher found a way that an attacker could leverage the macOS version of Zoom to gain access over the entire operating system. The exploit worked by targeting the installer for the Zoom application, which needs to run with special user permissions to install or remove the main Zoom application from a computer. Zoom earlier fixed some of the bugs involved but the most dangerous one was still left on macOS, which has now been fixed. Earlier, a security researcher found a way that an attacker could leverage the macOS version of Zoom to gain access over the entire operating system.Īccording to The Verge, details of the exploit were released in a presentation by Mac security specialist Patrick Wardle at the Def Con hacking conference in Las Vegas last week. Zoom acknowledged the issue (CVE-2022-28756) and said it has issued a fix in version 5.11.5 of the app on Mac, which users can now download. "A local low-privileged user could exploit this vulnerability to escalate their privileges to root," said the company, The company said in a security update that the Zoom client for meetings for macOS, starting with version 5.7.3 and before 5.11.5, "contains a vulnerability in the auto update process". Online video collaboration platform Zoom has fixed the most dangerous bug on Apple macOS that could allow hackers to take control of users' operating system when they open the meeting app. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |