PT-2012-4460 · Cisco · Cisco Webex Recording Format (Wrf) Player

Publicado 2012-06-29 · Atualizado 2018-12-03 · CVE-2012-3056

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco WebEx Recording Format (WRF) player versions T27 L through SP11 EP26 Cisco WebEx Recording Format (WRF) player versions T27 LB through SP21 EP10 Cisco WebEx Recording Format (WRF) player versions T27 LC through SP25 EP10 Cisco WebEx Recording Format (WRF) player versions T27 LD through SP32 CP1 Cisco WebEx Recording Format (WRF) player version T28 L10N through SP0

Description A buffer overflow issue in the Cisco WebEx Recording Format (WRF) player allows remote attackers to execute arbitrary code or cause a denial of service via a crafted WRF file.

Recommendations For versions T27 L through SP11 EP26, update to a version later than SP11 EP26. For versions T27 LB through SP21 EP10, update to a version later than SP21 EP10. For versions T27 LC through SP25 EP10, update to a version later than SP25 EP10. For versions T27 LD through SP32 CP1, update to a version later than SP32 CP1. For version T28 L10N through SP0, update to a version later than SP0.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-3056

Produtos afetados

Cisco Webex Recording Format (Wrf) Player

Referências · 2

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-3056 · Nota de Segurança