Summary
Ein Angreifer kann mehrere Schwachstellen in Zoom Video Communications Rooms und Zoom Video Communications Workplace ausnutzen, um erhöhte Berechtigungen zu erlangen, einen Denial-of-Service-Zustand zu erzeugen und vertrauliche Informationen offenzulegen.
Product
Zoom Rooms ist ein softwarebasiertes Raumsystem, das integrierte Audiokonferenzen, drahtlose Bildschirmfreigabe und Videokonferenzen ermöglicht.
Zoom Workplace ist eine Plattform, die Videokonferenz-, Chat-, Telefon- und Collaboration-Tools integriert, um Remote- und Hybrid-Arbeitsumgebungen in Unternehmen zu unterstützen.
Vulnerabilities 5
-
High 8.5
Zoom Apps - Buffer Overflow
Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access.
-
High 8.1
Zoom Apps - Improper Input Validation
Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access.
-
Medium 6.0
Zoom Apps for macOS - Uncontrolled Resource Consumption
Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access.
-
Medium 5.4
Zoom Apps for macOS - Symbolic Link Following
Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access.
-
Medium 4.3
Zoom Apps - Uncontrolled Resource Consumption
Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via network access.
Revision history
-
#1
Initiale Fassung
References
-
Zoom Security Bulletin vom 2024-11-11
https://www.zoom.com/en/trust/security-bulletin/zsb-24039/
-
Zoom Security Bulletin vom 2024-11-11
https://www.zoom.com/en/trust/security-bulletin/ZSB-24040/
-
Zoom Security Bulletin vom 2024-11-11
https://www.zoom.com/en/trust/security-bulletin/ZSB-24041/
-
Zoom Security Bulletin vom 2024-11-11
https://www.zoom.com/en/trust/security-bulletin/ZSB-24042/
-
Zoom Security Bulletin vom 2024-11-11
https://www.zoom.com/en/trust/security-bulletin/ZSB-24043/