PT-2012-4460 · Cisco · Cisco Webex Recording Format (Wrf) Player

Published 2012-06-29 · Updated 2018-12-03 · CVE-2012-3056

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco WebEx Recording Format (WRF) player versions T27 L through SP11 EP26 Cisco WebEx Recording Format (WRF) player versions T27 LB through SP21 EP10 Cisco WebEx Recording Format (WRF) player versions T27 LC through SP25 EP10 Cisco WebEx Recording Format (WRF) player versions T27 LD through SP32 CP1 Cisco WebEx Recording Format (WRF) player version T28 L10N through SP0

Description A buffer overflow issue in the Cisco WebEx Recording Format (WRF) player allows remote attackers to execute arbitrary code or cause a denial of service via a crafted WRF file.

Recommendations For versions T27 L through SP11 EP26, update to a version later than SP11 EP26. For versions T27 LB through SP21 EP10, update to a version later than SP21 EP10. For versions T27 LC through SP25 EP10, update to a version later than SP25 EP10. For versions T27 LD through SP32 CP1, update to a version later than SP32 CP1. For version T28 L10N through SP0, update to a version later than SP0.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-3056

Affected Products

Cisco Webex Recording Format (Wrf) Player

References · 2

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3056 · Security Note