PT-2020-15161

CVE-2020-1907

·

تاريخ النشر

2020-10-06

·

تاريخ التحديث

2020-10-15

الوصف من

CVSS 3.1
9.8
حرجة
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions WhatsApp for Android versions prior to 2.20.196.16 WhatsApp Business for Android versions prior to 2.20.196.12 WhatsApp for iOS versions prior to 2.20.90 WhatsApp Business for iOS versions prior to 2.20.90 WhatsApp for Portal versions prior to 173.0.0.29.505
Description A stack overflow could have allowed arbitrary code execution when parsing the contents of an RTP Extension header.
Recommendations For WhatsApp for Android versions prior to 2.20.196.16, update to version 2.20.196.16 or later. For WhatsApp Business for Android versions prior to 2.20.196.12, update to version 2.20.196.12 or later. For WhatsApp for iOS versions prior to 2.20.90, update to version 2.20.90 or later. For WhatsApp Business for iOS versions prior to 2.20.90, update to version 2.20.90 or later. For WhatsApp for Portal versions prior to 173.0.0.29.505, update to version 173.0.0.29.505 or later.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾