Lucene search
ZoomCVE-2024-39825HistoryAug 14, 2024 - 5:15 p.m.
CVE-2024-39825
2024-08-1417:15:15
CWE-787
CWE-122
Zoom
web.nvd.nist.gov
34
20
buffer overflow
zoom
workplace apps
escalation of privilege
network access
CVSS3
8.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.001
Percentile
20.0%
Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access.
Affected configurations
Node
zoomroomsRange<6.0.0ipados
ORzoomroomsRange<6.0.0macos
ORzoomroomsRange<6.0.0windows
ORzoomworkplaceRange<6.0.0android
ORzoomworkplaceRange<6.0.0iphone_os
ORzoomworkplace_desktopRange<6.0.0linux
ORzoomworkplace_desktopRange<6.0.0macos
ORzoomworkplace_desktopRange<6.0.0windows
ORzoomworkplace_virtual_desktop_infrastructureRange<5.17.13windows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zoom | rooms | * | cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:* |
| zoom | rooms | * | cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:* |
| zoom | rooms | * | cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:* |
| zoom | workplace | * | cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:* |
| zoom | workplace | * | cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:* |
| zoom | workplace_desktop | * | cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:* |
| zoom | workplace_desktop | * | cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:* |
| zoom | workplace_desktop | * | cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:* |
| zoom | workplace_virtual_desktop_infrastructure | * | cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"Windows",
"MacOS",
"Linux",
"iOS",
"Android"
],
"product": "Zoom Workplace Apps and Rooms Clients",
"vendor": "Zoom Communications Inc.",
"versions": [
{
"status": "affected",
"version": "see references"
}
]
}
]Social References
More
Related
cvelist
cvelist
CVE-2024-39825 Zoom Workplace Apps and Rooms Clients - Buffer Overflow
2024-08-14 16:34:53
vulnrichment
vulnrichment
CVE-2024-39825 Zoom Workplace Apps and Rooms Clients - Buffer Overflow
2024-08-14 16:34:53
nvd
nvd
CVE-2024-39825
2024-08-14 17:15:15
CVSS3
8.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.001
Percentile
20.0%
Related for CVE-2024-39825