CVE-2022-22788 DLL injection in Zoom Opener installer for Zoom and Zoom Rooms clients

What is CVE-2022-22788?

CVE-2022-22788 is a high-severity code injection vulnerability in Zoom Rooms, published on 15 Jun 2022. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed. The Zoom Opener installer for Zoom Client for Meetings before version 5.10.3 and Zoom Rooms for Conference Room for Windows before version 5.10.3 are susceptible to a DLL injection attack. This vulnerability could be used to run arbitrary code on the victims host.

Weakness: CWE-427

Which versions are affected by CVE-2022-22788?

It affects 2 products.

Products include Zoom Meetings, Zoom Rooms.

How do I fix CVE-2022-22788?

No fix has been published for CVE-2022-22788 yet. Limit exposure of the affected software until one is available.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2022-22788 being exploited?

There is no known exploitation of CVE-2022-22788 in the wild and no public exploit code.

Other vulnerabilities in Zoom Rooms

• CVE-2021-33907 Code injection in Zoom Client for Meetings for Windows Critical 9.8
• CVE-2022-28768 Local Privilege Escalation in Zoom Client Installer for macOS High 8.8
• CVE-2022-28763 Improper URL parsing in Zoom Clients High 8.8
• CVE-2022-28757 Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS High 8.8
• CVE-2022-28751 Local Privilege Escalation in Zoom Client for Meetings for MacOS High 8.8

All Zoom Rooms vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-79j9-4f8h-p5qv.