7.5

CVE-2023-39204

Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zoom ≫ Meetings SwPlatform android Version < 5.15.10
Zoom ≫ Meetings SwPlatform iphone_os Version < 5.15.10
Zoom ≫ Meetings SwPlatform linux Version < 5.15.10
Zoom ≫ Meetings SwPlatform macos Version < 5.15.10
Zoom ≫ Meetings SwPlatform windows Version < 5.15.10
Zoom ≫ Rooms SwPlatform android Version < 5.15.10
Zoom ≫ Rooms SwPlatform ipad_os Version < 5.15.10
Zoom ≫ Rooms SwPlatform macos Version < 5.15.10
Zoom ≫ Rooms SwPlatform windows Version < 5.15.10
Zoom ≫ Video Software Development Kit SwPlatform android Version < 5.15.10
Zoom ≫ Video Software Development Kit SwPlatform iphone_os Version < 5.15.10
Zoom ≫ Video Software Development Kit SwPlatform linux Version < 5.15.10
Zoom ≫ Video Software Development Kit SwPlatform macos Version < 5.15.10
Zoom ≫ Video Software Development Kit SwPlatform windows Version < 5.15.10
Zoom ≫ Virtual Desktop Infrastructure Version < 5.14.13
Zoom ≫ Virtual Desktop Infrastructure Version >= 5.15.0 < 5.15.11
Zoom ≫ Zoom SwPlatform android Version < 5.15.10
Zoom ≫ Zoom SwPlatform iphone_os Version < 5.15.10
Zoom ≫ Zoom SwPlatform linux Version < 5.15.10
Zoom ≫ Zoom SwPlatform macos Version < 5.15.10
Zoom ≫ Zoom SwPlatform windows Version < 5.15.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.06% 0.602
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
security@zoom.us 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://explore.zoom.us/en/trust/security/security-bulletin/
Vendor Advisory