News for hackers. Stuff that matters.

A comment on Vulnerability in the Mac Zoom client allows malicious websites to enable camera. Parent comment

Re:Vulnerability in the Mac Zoom client allows malicious web... by migueltarga on Monday July 08, 2019 @10:42PM (#20388596)
RingCentral Meetings uses zoom.us engine but the local server runs on port 19424 instead. I'm able to replicate the issue on it.

PoC: http://localhost:19424/launch?action=join&confno=3535353535

[ Parent | on HN ]
Re:Vulnerability in the Mac Zoom client allows malicious web... by nuvs on Monday July 08, 2019 @11:52PM (#20388890)
I can confirm that this vulnerability exists in RingCentral for macOS, version 7.0.136380.0312.

I was taken into Miguel's meeting, but since the host wasn't presented, it simply let me know it was waiting for him (It also had a friendly notice "Your video will turn ON automatically when the meeting starts".

I've changed my settings in Video > Meetings, just like in Zoom, to turn off my vid when joining. Also confirmed that the server is running on port 19424 (via terminal command 'lsof -i :19424').

[ Parent | on HN ]
Re:Vulnerability in the Mac Zoom client allows malicious web... by thijsvandien on Tuesday July 09, 2019 @05:24AM (#20390138)
In my case it's 19421 as written in the article.
[ Parent | on HN ]
Re:Vulnerability in the Mac Zoom client allows malicious web... by migueltarga on Tuesday July 09, 2019 @08:50AM (#20391186)
For RingCentral or Zoom? Could be because I have both on my machine.
[ Parent | on HN ]
Re:Vulnerability in the Mac Zoom client allows malicious web... by thijsvandien on Tuesday July 09, 2019 @09:17AM (#20391367)
Zoom
[ Parent | on HN ]
Re:Vulnerability in the Mac Zoom client allows malicious web... by migueltarga on Tuesday July 09, 2019 @10:13AM (#20391920)
Yes, my comment was about RingCentral Meetings
[ Parent | on HN ]
Re:Vulnerability in the Mac Zoom client allows malicious web... by thijsvandien on Tuesday July 09, 2019 @12:42PM (#20393701)
Sorry, never heard of that, and since the rest of the story was so similar, it didn't really register in my brain as something entirely different.
[ Parent | on HN ]