PT-2018-8801 · Cisco · Cisco Webex Network Recording Player

Publicado 2018-07-18 · Atualizado 2019-10-09 · CVE-2018-0380

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webex Recording Format (WRF) files (affected versions not specified)

Description The issue affects the Cisco Webex Network Recording Player, allowing an attacker to exploit vulnerabilities by providing a user with a malicious .arf or .wrf file. This could cause the affected player to crash, resulting in a denial of service (DoS) condition. The players are used to play back Webex meetings that have been recorded by an online meeting attendee. The vulnerabilities exist in the players available from Cisco Webex Meetings Suite sites, Cisco Webex Meetings Online sites, and Cisco Webex Meetings Server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2018-0380

Produtos afetados

Cisco Webex Network Recording Player

Referências · 5

• http://securitytracker.com/id/1041351 · Nota
• https://osv.dev/vulnerability/CVE-2018-0380 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-webex-dos · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0380 · Nota de Segurança
• http://securityfocus.com/bid/104880 · Nota