CVE-2022-22788 : Security Advisory and Response

Zoom Opener installer for Zoom Client for Meetings and Zoom Rooms for Conference Room for Windows is vulnerable to a DLL injection attack, allowing arbitrary code execution on the victims host.

Understanding CVE-2022-22788

This CVE highlights a security vulnerability in the Zoom Opener installer used by Zoom Client for Meetings and Zoom Rooms for Conference Room for Windows.

What is CVE-2022-22788?

The vulnerability in the Zoom Opener installer allows attackers to perform a DLL injection attack. This attack could enable malicious actors to execute arbitrary code on the victim's device.

The Impact of CVE-2022-22788

The impact of this vulnerability is rated as HIGH according to the CVSS v3.1 base score of 7.1. It has a high impact on confidentiality, integrity, and availability of the affected systems.

Technical Details of CVE-2022-22788

This section provides technical details related to the vulnerability.

Vulnerability Description

The vulnerability arises from the Zoom Opener installer, which can be exploited through a DLL injection attack, allowing threat actors to run unauthorized code on the victim's machine.

Affected Systems and Versions

Zoom Client for Meetings versions earlier than 5.10.3
All Zoom Rooms for Conference Room for Windows versions before 5.10.3

Exploitation Mechanism

The vulnerability is triggered during the installation process when the user downloads the Zoom Opener installer to join a meeting without the Zoom Meeting Client already installed.

Mitigation and Prevention

To address CVE-2022-22788, follow these mitigation steps:

Immediate Steps to Take

Update Zoom Client for Meetings and Zoom Rooms for Conference Room for Windows to version 5.10.3 or later.
Exercise caution when downloading files from untrusted sources.

Long-Term Security Practices

Regularly update all software to the latest versions to patch known vulnerabilities.
Educate users about safe downloading practices and the risks associated with opening files from unknown sources.

Patching and Updates

Zoom Video Communications Inc has released a security bulletin addressing this vulnerability. Refer to the official Zoom security bulletin for detailed patching instructions.