CVE-2023-39212
08.08.2023, 22:15
Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access.Enginsight
| Vendor | Product | Version |
|---|---|---|
| zoom | rooms | 𝑥 < 5.15.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-144 - Improper Neutralization of Line DelimitersThe software receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as line delimiters when they are sent to a downstream component.
- CWE-426 - Untrusted Search PathThe application searches for critical resources using an externally-supplied search path that can point to resources that are not under the application's direct control.