Zoom Workplace Desktop App Windows Installer <6.0.10: Authenticated Local DOS
CVE-2024-39827 Published on July 15, 2024

Zoom Workplace Desktop App for Windows - Improper Input Validation
Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.

NVD

Vulnerability Analysis

CVE-2024-39827 can be exploited with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
NONE
Availability Impact:
HIGH

Weakness Type

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.


Products Associated with CVE-2024-39827

Want to know whenever a new CVE is published for Zoom Workplace Desktop? stack.watch will email you.

Zoom Workplace Desktop
 

Affected Versions

Zoom Communications, Inc Zoom Workplace Desktop App for Windows Version before version 6.0.10 is affected by CVE-2024-39827

Exploit Probability

EPSS
0.07%
Percentile
20.64%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.