{ "containers": { "cna": { "affected": [ { "product": "Zoom Plugin for Microsoft Outlook for MacOS", "vendor": "n/a", "versions": [ { "status": "affected", "version": "All versions before 5.3.52553.0918" } ] } ], "descriptions": [ { "lang": "en", "value": "All versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a Time-of-check Time-of-use (TOC/TOU) vulnerability during the plugin installation process. This could allow a standard user to write their own malicious application to the plugin directory, allowing the malicious application to execute in a privileged context." } ], "problemTypes": [ { "descriptions": [ { "description": "Time-of-check Time-of-use (TOCTOU)", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2021-10-01T21:02:52.000Z", "orgId": "99b9af0d-a833-4a5d-9e2f-8b1324f35351", "shortName": "Zoom" }, "references": [ { "tags": [ "x_refsource_CONFIRM" ], "url": "https://explore.zoom.us/en/trust/security/security-bulletin/" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "security@zoom.us", "ID": "CVE-2021-34413", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Zoom Plugin for Microsoft Outlook for MacOS", "version": { "version_data": [ { "version_value": "All versions before 5.3.52553.0918" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "All versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a Time-of-check Time-of-use (TOC/TOU) vulnerability during the plugin installation process. This could allow a standard user to write their own malicious application to the plugin directory, allowing the malicious application to execute in a privileged context." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Time-of-check Time-of-use (TOCTOU)" } ] } ] }, "references": { "reference_data": [ { "name": "https://explore.zoom.us/en/trust/security/security-bulletin/", "refsource": "CONFIRM", "url": "https://explore.zoom.us/en/trust/security/security-bulletin/" } ] } } }, "adp": [ { "providerMetadata": { "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T00:12:50.089Z" }, "title": "CVE Program Container", "references": [ { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://explore.zoom.us/en/trust/security/security-bulletin/" } ] } ] }, "cveMetadata": { "assignerOrgId": "99b9af0d-a833-4a5d-9e2f-8b1324f35351", "assignerShortName": "Zoom", "cveId": "CVE-2021-34413", "datePublished": "2021-09-27T14:00:02.000Z", "dateReserved": "2021-06-09T00:00:00.000Z", "dateUpdated": "2024-08-04T00:12:50.089Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }