2 lines
3.3 KiB
JSON
2 lines
3.3 KiB
JSON
{"affected":[{"affectedData":[{"product":"WhatsApp for iOS","vendor":"Facebook","versions":[{"status":"affected","version":"2.20.61"},{"lessThan":"2.20.61","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"WhatsApp Business for iOS","vendor":"Facebook","versions":[{"status":"affected","version":"2.20.61"},{"lessThan":"2.20.61","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"cve-assign@fb.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:iphone_os:*:*","matchCriteriaId":"51FFA80F-58E2-4EBB-9815-6DFCFABE6F6A","versionEndExcluding":"2.20.61","vulnerable":true},{"criteria":"cpe:2.3:a:whatsapp:whatsapp_business:*:*:*:*:*:iphone_os:*:*","matchCriteriaId":"73A2E8EB-9428-48E6-AB28-3B3A3FD838EF","versionEndExcluding":"2.20.61","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have resulted in an out-of-memory denial of service. This issue would have required the receiver to explicitly open the attachment if it was received from a number not in the receiver's WhatsApp contacts."},{"lang":"es","value":"Un problema al descomprimir documentos docx, pptx y xlsx en WhatsApp para iOS anterior a versión v2.20.61 y WhatsApp Business para iOS anterior a versión v2.20.61, podría haber resultado en una denegación de servicio por falta de memoria. Este problema habría requerido que el receptor abriera explícitamente el archivo adjunto si se recibió de un número que no estaba en los contactos de WhatsApp del receptor"}],"id":"CVE-2020-1903","lastModified":"2026-06-17T03:02:35.223","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-10-06T18:15:15.907","references":[{"source":"cve-assign@fb.com","tags":["Vendor Advisory"],"url":"https://www.whatsapp.com/security/advisories/2020/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.whatsapp.com/security/advisories/2020/"}],"sourceIdentifier":"cve-assign@fb.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"cve-assign@fb.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-400"}],"source":"nvd@nist.gov","type":"Primary"}]}
|