CVE-2022-22787

概要

参考情報

• packetstormsecurity.com/files/167238/Zoom-XMPP-Stanza-Smuggling-Remote-Code-Execution.html · Third Party Advisory
• explore.zoom.us/en/trust/security/security-bulletin · Vendor Advisory

meetings のその他の脆弱性

• CVE-2023-43588中 6.5Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network a…
• CVE-2023-43582高 8.8Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.
• CVE-2023-39206高 7.5Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.
• CVE-2023-39205中 6.5Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network acce…
• CVE-2023-39204高 7.5Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.