PT-2009-5238 · Cisco · Cisco Webex Wrf Player

Published 2009-12-18 · Updated 2017-08-17 · CVE-2009-2880

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Cisco WebEx WRF Player versions 26.x through 26.49.31 for Windows Cisco WebEx WRF Player versions 27.x through 27.9.x for Windows Cisco WebEx WRF Player versions 26.x through 26.49.34 for Mac OS X and Linux Cisco WebEx WRF Player versions 27.x through 27.11.7 for Mac OS X and Linux

Description: The issue is related to a buffer overflow in the atrpui.dll component. This can be triggered by remote attackers using a crafted WebEx Recording Format (WRF) file, potentially leading to a denial of service (application crash) or possibly the execution of arbitrary code.

Recommendations: For Cisco WebEx WRF Player versions 26.x through 26.49.31 for Windows, update to version 26.49.32 or later. For Cisco WebEx WRF Player versions 27.x through 27.9.x for Windows, update to version 27.10.x or later. For Cisco WebEx WRF Player versions 26.x through 26.49.34 for Mac OS X and Linux, update to version 26.49.35 or later. For Cisco WebEx WRF Player versions 27.x through 27.11.7 for Mac OS X and Linux, update to version 27.11.8 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-2880

Affected Products

Cisco Webex Wrf Player

References · 17

• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Vendor Advisory
• http://secunia.com/advisories/37810 · Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2880 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=19499 · Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Vendor Advisory
• http://vupen.com/english/advisories/2009/3574 · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml · Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456 · Vendor Advisory
• http://securityfocus.com/bid/37352 · Note
• http://fortiguard.com/advisory/FGA-2009-48.html · Note
• http://securitytracker.com/id?1023360 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54841 · Note