Summary
Ein Angreifer kann mehrere Schwachstellen in Zoom Video Communications Rooms ausnutzen, um Informationen offenzulegen, seine Rechte zu erweitern oder einen Denial-of-Service-Zustand auszulösen.
Product
Zoom Rooms ist ein softwarebasiertes Raumsystem, das integrierte Audiokonferenzen, drahtlose Bildschirmfreigabe und Videokonferenzen ermöglicht.
Vulnerabilities 11
-
High 8.5
Zoom Workplace Apps and Rooms Clients - Buffer Overflow
Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access.
-
High 7.2
Runtime Service Access outside SMRAM
APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of t…
-
Medium 6.5
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure
Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access.
-
Medium 6.5
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.
-
Medium 6.5
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.
-
Medium 6.5
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer Overflow
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access.
-
Medium 6.2
Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Incorrect Privilege Assignment
Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access.
-
Medium 4.9
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
-
Medium 4.9
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
-
Medium 4.9
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing Authorization
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
-
Medium 4.9
Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure
Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
Revision history
-
#1
Initiale Fassung
References
-
Zoom Security Bulletin vom 2024-08-12
https://www.zoom.com/en/trust/security-bulletin/ZSB-24022/
-
Zoom Security Bulletin vom 2024-08-12
https://www.zoom.com/en/trust/security-bulletin/ZSB-24029/
-
Zoom Security Bulletin vom 2024-08-12
https://www.zoom.com/en/trust/security-bulletin/ZSB-24030/
-
Zoom Security Bulletin vom 2024-08-12
https://www.zoom.com/en/trust/security-bulletin/ZSB-24031/
-
Zoom Security Bulletin vom 2024-08-12
https://www.zoom.com/en/trust/security-bulletin/ZSB-24034/