A vulnerability has been noticed in the Zoom video conferencing application for Windows 7 and earlier versions that could allow an attacker to remotely execute arbitrary code on the targeted system, a national cyber security agency said on Friday. The Computer Emergency Response Team of India (CERT-In) said the severity rating of this vulnerability is “high” and advised users to update the app and its security by visiting the Zoom support service website. “The vulnerability has been reported in the Zoom video conferencing application running on Windows 7 and earlier Windows versions which could allow a remote attacker to execute arbitrary code on the targeted system,” the advisory said. It said a remote attacker could exploit this vulnerability by enticing the user to execute a specially crafted file. The popular video conferencing platform had last month released an enhanced and encrypted version of the application in order to ensure protection and privacy of personal information.
Source: The Hindu July 18, 2020 03:56 UTC