Summary
Ein entfernter Angreifer kann mehrere Schwachstellen in Zoom Video Communications Zoom Client ausnutzen, um Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen oder seine Privilegien zu erweitern.
Product
Zoom bietet Kommunikationssoftware, die Videokonferenzen, Online-Besprechungen, Chat und mobile Zusammenarbeit kombiniert.
Vulnerabilities 7
-
Medium 5.5
Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via netw…
-
Medium 4.9
Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information d…
-
Medium 4.3
Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow a…
-
Medium 4.3
Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network acces…
-
Medium 4.3
Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of ser…
-
Low 3.7
Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network acces…
-
Low 3.5
Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information dis…
Revision history
-
#1
Initiale Fassung
References
-
Zoom Security Bulletins vom 2023-11-14
https://explore.zoom.us/en/trust/security/security-bulletin/