Description
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a more sophisticated attack to trick an unsuspecting users client to connect to a malicious server when attempting to use Zoom services.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Zoom Video Communications Inc Zoom Client for Meetings for Android
unspecified to < 5.10.0affected
Zoom Video Communications Inc Zoom Client for Meetings for iOS
unspecified to < 5.10.0affected
Zoom Video Communications Inc Zoom Client for Meetings for Linux
unspecified to < 5.10.0affected
Zoom Video Communications Inc Zoom Client for Meetings for MacOS
unspecified to < 5.10.0affected
Zoom Video Communications Inc Zoom Client for Meetings for Windows
unspecified to < 5.10.0affected