← Back

Ringcentral

ringcentral

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Ringcentral
ringcentral
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-13450
2Ringcentral
Zoom
2Ringcentral
Zoom
Nov 21, 2024
Jul 9, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom...Show more
In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom web server on localhost port 19421 or 19424. NOTE: a machine remains vulnerable if the Zoom Client was installed in the past and then uninstalled. Blocking exploitation requires additional steps, such as the ZDisableVideo preference and/or killing the web server, deleting the ~/.zoomus directory, and creating a ~/.zoomus plain file.Show less