Zoom Chat Susceptible to Zip Bombing
CVE-2022-22780

4.7MEDIUM

Key Information:

Vendor

Zoom
Status
Zoom Client For Meetings For Android
Zoom Client For Meetings For iOS
Zoom Client For Meetings For Linux
Zoom Client For Meetings For Mac OS
Vendor
CVE Published:
9 February 2022

What is CVE-2022-22780?

The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions: Android before version 5.8.6, iOS before version 5.9.0, Linux before version 5.8.6, macOS before version 5.7.3, and Windows before version 5.6.3. This could lead to availability issues on the client host by exhausting system resources.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Zoom Client for Meetings for Android < 5.8.6

Zoom Client for Meetings for iOS < 5.9.0

Zoom Client for Meetings for Linux < 5.8.6

References

https://explore.zoom.us/en/trust/security/security-bulletin
x_refsource_MISC

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Johnny Yu of Walmart Global Tech
JSON
.