Cisco WebEx Player Buffer Overflow Vulnerability
RISK: Medium Risk
TYPE: Clients - Im, Chat & Voip
Multiple vulnerabilities have been identified in Cisco WebEx Player. A remote user can cause arbitrary code to be executed on the target user's system.
A remote user can create specially crafted WRF file that, when loaded by the target user, will trigger a buffer overflow or heap overflow and execute arbitrary code on the target system. The code will run with the privileges of the target user.
Impact
- Remote Code Execution
System / Technologies affected
- Versions prior to 27.32.10 (T27LDSP32EP10), 28.4 (T28.4)
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- The vendor has issued a fix (27.32.10 (T27LDSP32EP10), 28.4 (T28.4)).
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-webex
Vulnerability Identifier
Source
Related Link
Share with