Paper/Archive/CVE-2023-28798

CVE-2023-28798

Zscaler Client Connector — Out-of-bounds write to heap in pacparser

Description · from the CVE record

An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution.

Affected

ProductAffectedFixed inSource

Client Connector< 3.7.0.1723.7.0.172CNA

client_connector< 3.7.0.172 3.7.0.172 CISA-ADP

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Zscaler (CNA)6.5CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total