Skip to content

bentoboxinfosec

many parts make the whole

  • Home
  • Blog
  • CTF Cheat Sheet
  • About
  • Home
  • 2021
  • August
  • 23
  • REMOTE CODE EXECUTION in Zoom from Pwn2Own 2021

REMOTE CODE EXECUTION in Zoom from Pwn2Own 2021

Posted on August 23, 2021May 26, 2023 By topbento No Comments on REMOTE CODE EXECUTION in Zoom from Pwn2Own 2021
News, Vulnerability

As more and more people are working remotely virtual meeting apps like Zoom are becoming an essential part of many organizations. Although Zoom is no stranger to security issues, see CVE-2021-28133 and CVE-2021-30480, it is still widely in use. Personally I would recommend using an alternative like Teams or Webex, but to each their own.

A great example of Remote Code Execution in Zoom was recently presented by Thijs Alkemade and Daan Keuper at Pwn2Own 2021 that explains the bugs and how they were able to use them to eventually gain a reverse shell. The writeup is very detailed and shows all the steps that go into controlling heap corruption and making more reliable exploit code.

Full writeup here!

Tags: CVE-2021-28133 CVE-2021-30480 cybersecurity news informationsecurity news Pwn2Own 2021

Post navigation

❮ Previous Post: PrintNightmare – REMOTE CODE EXECUTION in Windows Spooler Service CVE-2021-1675
Next Post: REMOTE CODE EXECUTION in fail2ban – CVE-2021-32749 ❯

You may also like

News
MGM AND CAESARS RANSOMWARE ATTACKS
September 15, 2023
Malware
LINUX KERNEL SUPPLIER-SIDE OpenSSH BACKDOOR
May 17, 2024
News
MOST VULNERABILITIES CAN BE EXPLOITED BY GPT-4 BY READING THREAT ADVISORIES
April 19, 2024
Breach
Cisco CONFIRMS AUTHENTICITY OF 4.45 GB DATA BREACH
January 2, 2025

Leave a Reply Cancel reply

You must be logged in to post a comment.

Recent Posts

  • Salt Typhoon THREAT ACTORS SPOTTED ON US GOVT NETWORKS BEFORE TELCOS
  • Charter and Windstream ADDED TO LIST OF TELCO PROVIDERS COMPROMISED BY Salt Typhoon
  • Cisco CONFIRMS AUTHENTICITY OF 4.45 GB DATA BREACH
  • NINTH TELECOM COMPANY ADDED TO LIST OF Salt Typhoon TARGETS
  • McDonald’s API EXPLOITED FOR ONE CENT DELIVERIES

Recent Comments

No comments to show.

Archives

  • January 2025
  • December 2024
  • November 2024
  • October 2024
  • May 2024
  • April 2024
  • March 2024
  • September 2023
  • August 2023
  • May 2023
  • April 2023
  • March 2023
  • February 2023
  • January 2023
  • December 2022
  • November 2022
  • August 2022
  • July 2022
  • May 2022
  • April 2022
  • March 2022
  • January 2022
  • December 2021
  • November 2021
  • September 2021
  • August 2021
  • July 2021
  • January 2021
  • December 2020
  • August 2020
  • May 2020
  • March 2020
  • February 2020
  • October 2019
  • June 2019
  • April 2019

Categories

  • Breach
  • Cloud
  • Conferences
  • Hardware Hacking
  • Malware
  • News
  • Ransomware
  • Tools
  • Tutorial
  • Uncategorized
  • Vulnerability
  • Walkthough
  • Home
  • Blog
  • CTF Cheat Sheet
  • About
  • Twitter
  • Github
  • YouTube

Copyright © 2026 bentoboxinfosec.

Theme: Oceanly News Dark by ScriptsTown