Security Advisory

CVE-2022-28750

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-08-11 14:55:21

Last updated 2024-09-16 21:07:38

Assigner Zoom

CVSS score 7.5

State PUBLISHED

Description

Zoom On-Premise Meeting Connector Zone Controller (ZC) before version 4.8.20220419.112 fails to properly parse STUN error codes, which can result in memory corruption and could allow a malicious actor to crash the application. In versions older than 4.8.12.20211115, this vulnerability could also be leveraged to execute arbitrary code.

← Browse all CVEs View on cve.org ↗