PT-2009-5235 · Cisco · Cisco Webex Wrf Player

Publicado 2009-12-18 · Atualizado 2017-08-17 · CVE-2009-2877

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Cisco WebEx WRF Player versions 26.x through 26.49.31 for Windows Cisco WebEx WRF Player versions 27.x through 27.9.x for Windows Cisco WebEx WRF Player versions 26.x through 26.49.34 for Mac OS X and Linux Cisco WebEx WRF Player versions 27.x through 27.11.7 for Mac OS X and Linux

Description: The issue is a stack-based buffer overflow in the ataudio.dll component. It allows remote attackers to cause a denial of service, resulting in an application crash, or execute arbitrary code via a crafted WebEx Recording Format (WRF) file.

Recommendations: For Cisco WebEx WRF Player versions 26.x through 26.49.31 for Windows, update to version 26.49.32 or later. For Cisco WebEx WRF Player versions 27.x through 27.9.x for Windows, update to version 27.10.x or later. For Cisco WebEx WRF Player versions 26.x through 26.49.34 for Mac OS X and Linux, update to version 26.49.35 or later. For Cisco WebEx WRF Player versions 27.x through 27.11.7 for Mac OS X and Linux, update to version 27.11.8 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-2877

Produtos afetados

Cisco Webex Wrf Player

Referências · 17

• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-2877 · Nota de Segurança
• http://secunia.com/advisories/37810 · Aviso do Fabricante
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Aviso do Fabricante
• http://fortiguard.com/advisory/FGA-2009-48.html · Nota
• http://securitytracker.com/id?1023360 · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=19499 · Aviso do Fabricante
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/3574 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54841 · Nota
• http://securityfocus.com/bid/37352 · Aviso do Fabricante
• http://cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml · Aviso do Fabricante
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Aviso do Fabricante
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Aviso do Fabricante
• http://osvdb.org/61127 · Nota