Skip to content

Instantly share code, notes, and snippets.

@bobbyno
Last active July 9, 2019 19:18
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bobbyno/d29e44368cccea0bf445c0358ab01a7a to your computer and use it in GitHub Desktop.
Save bobbyno/d29e44368cccea0bf445c0358ab01a7a to your computer and use it in GitHub Desktop.
Zoom Zero-Day Vulnerability Fix for Mac Homebrew Users
#!/usr/bin/env bash
# Zoom Zero-Day Vulnerability Fix for Mac Homebrew Users
# @bobbyno based on
# https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5
uninstall_zoom() {
# Use zap to completely uninstall Zoom
## Zap docs: https://github.com/Homebrew/homebrew-cask/blob/master/doc/cask_language_reference/stanzas/zap.md
## Zoom recipe: https://github.com/Homebrew/homebrew-cask/blob/7b1788d6e20471911094f0f2a857aac8e5c06d81/Casks/zoomus.rb
brew update
brew cask zap -f zoomus
}
install_zoom() {
brew cask install zoomus
}
prevent_vulnerable_server_from_running() {
pkill "ZoomOpener"; rm -rf ~/.zoomus; touch ~/.zoomus && chmod 000 ~/.zoomus;
pkill "RingCentralOpener"; rm -rf ~/.ringcentralopener; touch ~/.ringcentralopener && chmod 000 ~/.ringcentralopener;
}
update_privacy_settings() {
# Ref: https://support.zoom.us/hc/en-us/articles/115001799006-Mass-Deployment-with-Preconfigured-Settings-for-Mac
defaults write ~/Library/Preferences/us.zoom.xos.plist ZDisableVideo 1
defaults write ~/Library/Preferences/us.zoom.xos.plist MuteVoipWhenJoin 1
}
uninstall_zoom
install_zoom
prevent_vulnerable_server_from_running
update_privacy_settings
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment