CVE-2020-11470

Опубликовано: 01 апр. 2020

Источник: nvd

CVSS3: 2.3

CVSS3: 3.3

CVSS2: 2.1

EPSS Низкий

Описание

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access.

Ссылки

https://blog.zoom.us/wordpress/2020/04/01/a-message-to-our-users/
Vendor Advisory
https://objective-see.com/blog/blog_0x56.html
Exploit
Third Party Advisory
https://blog.zoom.us/wordpress/2020/04/01/a-message-to-our-users/
Vendor Advisory
https://objective-see.com/blog/blog_0x56.html
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zoom:meetings:*:*:*:*:*:mac_os:*:*

Версия до 4.6.8 (включая)

EPSS

Процентиль: 22%

0.00071

Низкий

2.3 Low

CVSS3

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-345

Связанные уязвимости

GHSA-fwhj-68xr-qf9r

github

больше 3 лет назад

EPSS

Процентиль: 22%

0.00071

Низкий

2.3 Low

CVSS3

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-345