Zoom針對旗下視訊會議及通訊平臺修補高風險漏洞
支付動態 · 2024-11-15
本週Zoom發布資安公告，修補旗下產品6訊漏洞，其中列為高風險的CVE-2024-45419、CVE-2024-45421較嚴重，若不處理，攻擊者可藉此洩露特定資訊或提升權限
11月12日Zoom發布資安公告，表示他們修補旗下視訊會議及通訊平臺的6項漏洞，這些漏洞有2項被列為高風險層級，攻擊者有機會藉此提升權限或是洩露敏感資訊。
其中，CVE-2024-45421為記憶體緩衝區溢位漏洞，通過身分驗證的攻擊者能藉由網路存取Zoom應用程式，從而提升權限，CVSS風險評分為8.5。
另一個高風險漏洞CVE-2024-45419，涉及輸入驗證不當，攻擊者有機會在未經身分驗證的情況下，透過網路存取造成資訊洩露，CVSS風險為8.1。
值得留意的是，這兩項弱點皆影響Zoom Workplace應用程式、Rooms用戶端、Rooms控制器、視訊SDK、會議SDK，以及Windows版Workplace VDI用戶端程式，Zoom已發布新版軟體修補。
Popular articles
British gambling levy rates confirmed for each vertical
Regulation
Indiana online casino bill stalls in House committee
Regulation
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
Kazakhstan plans to penalise online casino promotions
Regulation
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
Manila delivers: Highlights from SiGMA Asia 2026
Southeast Asia
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
