Lucene search

K
nvd[email protected]NVD:CVE-2023-28601
HistoryJun 13, 2023 - 6:15 p.m.

CVE-2023-28601

2023-06-1318:15:21
CWE-119
CWE-358
web.nvd.nist.gov
3
zoom
windows
vulnerability
memory buffer

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

8.4

Confidence

High

EPSS

0.001

Percentile

17.6%

Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability. A malicious user may alter protected Zoom Client memory buffer potentially causing integrity issues within the Zoom Client.

Affected configurations

Nvd
Node
zoomzoomRange<5.14.0windows
VendorProductVersionCPE
zoomzoom*cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

8.4

Confidence

High

EPSS

0.001

Percentile

17.6%

Related for NVD:CVE-2023-28601