Skip to content

bentoboxinfosec

many parts make the whole

  • Home
  • Blog
  • CTF Cheat Sheet
  • About
  • Home
  • 2021
  • August
  • 23
  • REMOTE CODE EXECUTION in Zoom from Pwn2Own 2021

REMOTE CODE EXECUTION in Zoom from Pwn2Own 2021

Posted on August 23, 2021May 26, 2023 By topbento No Comments on REMOTE CODE EXECUTION in Zoom from Pwn2Own 2021
News, Vulnerability

As more and more people are working remotely virtual meeting apps like Zoom are becoming an essential part of many organizations. Although Zoom is no stranger to security issues, see CVE-2021-28133 and CVE-2021-30480, it is still widely in use. Personally I would recommend using an alternative like Teams or Webex, but to each their own.

A great example of Remote Code Execution in Zoom was recently presented by Thijs Alkemade and Daan Keuper at Pwn2Own 2021 that explains the bugs and how they were able to use them to eventually gain a reverse shell. The writeup is very detailed and shows all the steps that go into controlling heap corruption and making more reliable exploit code.

Full writeup here!

Tags: CVE-2021-28133 CVE-2021-30480 cybersecurity news informationsecurity news Pwn2Own 2021

Post navigation

❮ Previous Post: PrintNightmare – REMOTE CODE EXECUTION in Windows Spooler Service CVE-2021-1675
Next Post: REMOTE CODE EXECUTION in fail2ban – CVE-2021-32749 ❯

You may also like

News
Windows XP ACTIVATION ALGORITHM CRACKED
May 26, 2023
Breach
NINTH TELECOM COMPANY ADDED TO LIST OF Salt Typhoon TARGETS
December 28, 2024
News
KERNEL STACK BUFFER OVERFLOW in Linux – CVE-2023-0179
January 16, 2023
News
UnitedHealth Group HAS PAID OVER $2 BILLION FOLLOWING CYBERATTACK
March 20, 2024

Leave a Reply Cancel reply

You must be logged in to post a comment.

Recent Posts

  • Salt Typhoon THREAT ACTORS SPOTTED ON US GOVT NETWORKS BEFORE TELCOS
  • Charter and Windstream ADDED TO LIST OF TELCO PROVIDERS COMPROMISED BY Salt Typhoon
  • Cisco CONFIRMS AUTHENTICITY OF 4.45 GB DATA BREACH
  • NINTH TELECOM COMPANY ADDED TO LIST OF Salt Typhoon TARGETS
  • McDonald’s API EXPLOITED FOR ONE CENT DELIVERIES

Recent Comments

No comments to show.

Archives

  • January 2025
  • December 2024
  • November 2024
  • October 2024
  • May 2024
  • April 2024
  • March 2024
  • September 2023
  • August 2023
  • May 2023
  • April 2023
  • March 2023
  • February 2023
  • January 2023
  • December 2022
  • November 2022
  • August 2022
  • July 2022
  • May 2022
  • April 2022
  • March 2022
  • January 2022
  • December 2021
  • November 2021
  • September 2021
  • August 2021
  • July 2021
  • January 2021
  • December 2020
  • August 2020
  • May 2020
  • March 2020
  • February 2020
  • October 2019
  • June 2019
  • April 2019

Categories

  • Breach
  • Cloud
  • Conferences
  • Hardware Hacking
  • Malware
  • News
  • Ransomware
  • Tools
  • Tutorial
  • Uncategorized
  • Vulnerability
  • Walkthough
  • Home
  • Blog
  • CTF Cheat Sheet
  • About
  • Twitter
  • Github
  • YouTube

Copyright © 2025 bentoboxinfosec.

Theme: Oceanly News Dark by ScriptsTown