Cisco WebEx Player Buffer Overflows Vulnerabilities

Multiple vulnerabilities have been identified in Cisco WebEx Player. A remote user can create a specially crafted file that, when loaded by the target user, will trigger a buffer overflow or memory corruption flaw and execute arbitrary code on the target system. The code will run with the privileges of the target user.

1. The Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) players are affected.
2. An out-of-bounds memory read may occur.
3. A memory corruption error may occur in the ARF player and its LZW decompression.
4. A heap overflow may occur in audio channel parsing in the WRF player.