PT-2011-1392 · Cisco · Cisco Webex Meeting Center

Publicado 2011-02-02 · Atualizado 2018-10-10 · CVE-2010-3270

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:H/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Center T27LB before SP21 EP3 Cisco WebEx Meeting Center T27LC before SP22

Description The issue is a stack-based buffer overflow that allows user-assisted remote authenticated users to execute arbitrary code. This can be achieved by providing a crafted .atp file and then disconnecting from a meeting.

Recommendations For Cisco WebEx Meeting Center T27LB, update to SP21 EP3 or later. For Cisco WebEx Meeting Center T27LC, update to SP22 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-3270

Produtos afetados

Cisco Webex Meeting Center

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2010-3270 · Nota de Segurança
• http://securityfocus.com/archive/1/516095/100/0/threaded · Nota
• http://securitytracker.com/id?1025015 · Nota
• http://vupen.com/english/advisories/2011/0260 · Aviso do Fabricante
• http://securityfocus.com/bid/46078 · Nota
• http://coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabilities · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=22355 · Nota