PT-2009-5238 · Cisco · Cisco Webex Wrf Player

Publicado 2009-12-18 · Atualizado 2017-08-17 · CVE-2009-2880

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Cisco WebEx WRF Player versions 26.x through 26.49.31 for Windows Cisco WebEx WRF Player versions 27.x through 27.9.x for Windows Cisco WebEx WRF Player versions 26.x through 26.49.34 for Mac OS X and Linux Cisco WebEx WRF Player versions 27.x through 27.11.7 for Mac OS X and Linux

Description: The issue is related to a buffer overflow in the atrpui.dll component. This can be triggered by remote attackers using a crafted WebEx Recording Format (WRF) file, potentially leading to a denial of service (application crash) or possibly the execution of arbitrary code.

Recommendations: For Cisco WebEx WRF Player versions 26.x through 26.49.31 for Windows, update to version 26.49.32 or later. For Cisco WebEx WRF Player versions 27.x through 27.9.x for Windows, update to version 27.10.x or later. For Cisco WebEx WRF Player versions 26.x through 26.49.34 for Mac OS X and Linux, update to version 26.49.35 or later. For Cisco WebEx WRF Player versions 27.x through 27.11.7 for Mac OS X and Linux, update to version 27.11.8 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-2880

Produtos afetados

Cisco Webex Wrf Player

Referências · 17

• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Aviso do Fabricante
• http://secunia.com/advisories/37810 · Aviso do Fabricante
• http://securityfocus.com/bid/37352 · Nota
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Aviso do Fabricante
• http://fortiguard.com/advisory/FGA-2009-48.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2880 · Nota de Segurança
• http://securitytracker.com/id?1023360 · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=19499 · Aviso do Fabricante
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/3574 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54841 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml · Aviso do Fabricante
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Aviso do Fabricante
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Aviso do Fabricante
• http://fortiguard.com/encyclopedia/vulnerability/cisco.webex.player.atrpui.dos.html · Nota