PT-2025-7906 · Zoom · Zoom

Published 2024-11-12 · Updated 2025-03-04 · CVE-2024-45417

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Zoom versions prior to 6.1.5

Description The issue concerns uncontrolled resource consumption in the installer for some Zoom apps for macOS, which may allow a privileged user to conduct a disclosure of information via local access.

Recommendations For versions prior to 6.1.5, update to version 6.1.5 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-708

Related Identifiers

BDU:2025-02651

CVE-2024-45417

Affected Products

Zoom

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-45417 · Security Note
• https://bdu.fstec.ru/vul/2025-02651 · Security Note
• https://zoom.com/en/trust/security-bulletin/zsb-24039 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-45417 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1894591853963493434 · Twitter Post
• https://t.me/cvenotify/113391 · Telegram Post
• https://twitter.com/CVEnew/status/1894496060422418878 · Twitter Post
• https://t.me/cvedetector/18926 · Telegram Post