PT-2023-6934 · Zoom · Zoom Vdi Client+1

Published 2023-11-14 · Updated 2024-09-27 · CVE-2023-39203

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Zoom Desktop Client for Windows versions (affected versions not specified) Zoom VDI Client versions (affected versions not specified)

Description The issue is related to uncontrolled resource consumption in Zoom Team Chat, which may allow an unauthenticated user to disclose information via network access. This could potentially lead to a denial of service.

Recommendations For Zoom Desktop Client for Windows, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Zoom VDI Client, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

CWE-789

Related Identifiers

BDU:2023-07953

CVE-2023-39203

Affected Products

Zoom Desktop Client For Windows

Zoom Vdi Client

References · 6

• https://osv.dev/vulnerability/CVE-2023-39203 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-39203 · Security Note
• https://explore.zoom.us/en/trust/security/security-bulletin · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07953 · Security Note
• https://t.me/cvenotify/60868 · Telegram Post
• https://t.me/cvenotify/96429 · Telegram Post