Buffer Overflow Vulnerability in Zoom Clients by Zoom
CVE-2023-39206

3.7LOW

Key Information:

Vendor

Zoom Video Communications, Inc.
Status
Zoom Clients
Vendor
CVE Published:
14 November 2023

What is CVE-2023-39206?

A buffer overflow vulnerability exists in several Zoom clients that can be exploited by unauthenticated users. This vulnerability allows attackers to send specially crafted packets to the client over the network, potentially leading to a denial of service condition. This form of attack does not require prior authentication, making it particularly concerning for users of affected versions. Users are encouraged to update to the latest version of Zoom to mitigate potential risks.

Affected Version(s)

Zoom Clients Windows see references

References

https://explore.zoom.us/en/trust/security/security-bulletin/

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.