KLA12380 Multiple vulnerabilities in Zoom

Multiple vulnerabilities were found in Zoom. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Security bypass vulnerability in can be exploited to obtain sensitive information or cause denial of service.
2. Buffer overflow vulnerability in can be exploited to execute arbitrary code.

Original advisories

Zoom Security Bulletin

Related products

Zoom-MSI

CVE list

CVE-2021-34424 critical

CVE-2021-34423 critical

Solution

Update to the latest version

Download Zoom

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Zoom for Windows earlier than 5.8.4