5.5

CVE-2020-1903

EPSS 0.66%
Veröffentlicht 06.10.2020 18:15:15
Zuletzt bearbeitet 21.11.2024 05:11:34
CVE-Watchlists
Login
Unerledigt
Login

An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have resulted in an out-of-memory denial of service. This issue would have required the receiver to explicitly open the attachment if it was received from a number not in the receiver's WhatsApp contacts.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

WhatsApp ≫ WhatsApp SwPlatformiphone_os Version < 2.20.61

WhatsApp ≫ WhatsApp Business SwPlatformiphone_os Version < 2.20.61

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.66%	0.469

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://www.whatsapp.com/security/advisories/2020/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-1903

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-1903

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-1903

EUVD