Към съдържанието

CVE-2022-22780: Zoom Video Communications Inc Zoom Client for Meetings

4.7

CVSS 3.1

1,7%

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и след действие от потребителя.

    Описание

    Оригинално описание

    The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions: Android before version 5.8.6, iOS before version 5.9.0, Linux before version 5.8.6, macOS before version 5.7.3, and Windows before version 5.6.3. This could lead to availability issues on the client host by exhausting system resources.

    Засегнати продукти

    • Zoom Video Communications Inc Zoom Client for Meetings for Android: unspecified преди 5.8.6
    • Zoom Video Communications Inc Zoom Client for Meetings for iOS: unspecified преди 5.9.0
    • Zoom Video Communications Inc Zoom Client for Meetings for Linux: unspecified преди 5.8.6
    • Zoom Video Communications Inc Zoom Client for Meetings for macOS: unspecified преди 5.7.3
    • Zoom Video Communications Inc Zoom Client for Meetings for Windows: unspecified преди 5.6.3

    История

    • 9 февруари 2022 Публикувано

    Други уязвимости в Zoom Video Communications Inc Zoom Client for Meetings for Android

    Първоизточници

    CVE-2022-22780: Zoom Video Communications Inc Zoom Client for Meetings | freedomonline.bg