PT-2009-5235 · Cisco · Cisco Webex Wrf Player

Published 2009-12-18 · Updated 2017-08-17 · CVE-2009-2877

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Cisco WebEx WRF Player versions 26.x through 26.49.31 for Windows Cisco WebEx WRF Player versions 27.x through 27.9.x for Windows Cisco WebEx WRF Player versions 26.x through 26.49.34 for Mac OS X and Linux Cisco WebEx WRF Player versions 27.x through 27.11.7 for Mac OS X and Linux

Description: The issue is a stack-based buffer overflow in the ataudio.dll component. It allows remote attackers to cause a denial of service, resulting in an application crash, or execute arbitrary code via a crafted WebEx Recording Format (WRF) file.

Recommendations: For Cisco WebEx WRF Player versions 26.x through 26.49.31 for Windows, update to version 26.49.32 or later. For Cisco WebEx WRF Player versions 27.x through 27.9.x for Windows, update to version 27.10.x or later. For Cisco WebEx WRF Player versions 26.x through 26.49.34 for Mac OS X and Linux, update to version 26.49.35 or later. For Cisco WebEx WRF Player versions 27.x through 27.11.7 for Mac OS X and Linux, update to version 27.11.8 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-2877

Affected Products

Cisco Webex Wrf Player

References · 17

• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2877 · Security Note
• http://secunia.com/advisories/37810 · Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=19499 · Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Vendor Advisory
• http://vupen.com/english/advisories/2009/3574 · Vendor Advisory
• http://securityfocus.com/bid/37352 · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml · Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Vendor Advisory
• http://fortiguard.com/advisory/FGA-2009-48.html · Note
• http://securitytracker.com/id?1023360 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54841 · Note