Lucene search
HistoryAug 14, 2024 - 5:15 p.m.
CVE-2024-39825
buffer overflow
zoom
workplace apps
rooms clients
authenticated user
privilege escalation
network access
CVSS3
8.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access.
Affected configurations
Node
zoomroomsRange<6.0.0ipados
ORzoomroomsRange<6.0.0macos
ORzoomroomsRange<6.0.0windows
ORzoomworkplaceRange<6.0.0android
ORzoomworkplaceRange<6.0.0iphone_os
ORzoomworkplace_desktopRange<6.0.0linux
ORzoomworkplace_desktopRange<6.0.0macos
ORzoomworkplace_desktopRange<6.0.0windows
ORzoomworkplace_virtual_desktop_infrastructureRange<5.17.13windows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zoom | rooms | * | cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:* |
| zoom | rooms | * | cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:* |
| zoom | rooms | * | cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:* |
| zoom | workplace | * | cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:* |
| zoom | workplace | * | cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:* |
| zoom | workplace_desktop | * | cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:* |
| zoom | workplace_desktop | * | cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:* |
| zoom | workplace_desktop | * | cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:* |
| zoom | workplace_virtual_desktop_infrastructure | * | cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:* |
Related
cvelist
cvelist
CVE-2024-39825 Zoom Workplace Apps and Rooms Clients - Buffer Overflow
2024-08-14 16:34:53
vulnrichment
vulnrichment
CVE-2024-39825 Zoom Workplace Apps and Rooms Clients - Buffer Overflow
2024-08-14 16:34:53
cve
cve
CVE-2024-39825
2024-08-14 17:15:15
CVSS3
8.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
Related for NVD:CVE-2024-39825