CVE-2019-13449

概要

参考情報

• assets.zoom.us/docs/pdf/Zoom+Response+Video-On+Vulnerability.pdf · Vendor Advisory
• blog.zoom.us/wordpress/2019/07/08/response-to-video-on-concern · Vendor Advisory
• bugs.chromium.org/p/chromium/issues/detail · Exploit
• medium.com/%40jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5
• twitter.com/zoom_us/status/1148710712241295361 · Third Party Advisory

zoom のその他の脆弱性

• CVE-2025-49464中 6.5Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service via network access.
• CVE-2025-49463中 6.5Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a dis…
• CVE-2025-49462低 3.5Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information vi…
• CVE-2024-27247中 6.7Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to condu…
• CVE-2024-27242中 6.8Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduct a denial of service …