Zoom: Hardcode Attack Possible without Clicking

Linux-Magazin

Factuality

Ownership

Several vulnerabilities in Zoom allow attacks on other participants without having to activate them themselves. Neither a click nor a download is required. Via manipulated data, attackers in the worst case can execute malicious code on external devices and gain control of it during an ongoing meeting. The vulnerabilities were discovered by IT security researchers. Applications are affected.