PT-2017-12526 · Cisco · Cisco Webex Meetings+2

Published 2017-11-30 · Updated 2019-10-09 · CVE-2017-12360

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player (affected versions not specified)

Description A denial of service (DoS) condition could be caused by an attacker providing a malicious WebEx Recording Format (WRF) file to a user via email or URL, convincing them to open it. This could cause the affected player to crash. The issue affects Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetings sites, and Cisco WebEx WRF players.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2017-12360

Affected Products

Cisco Webex Business Suite

Cisco Webex Meetings

Cisco Webex Network Recording Player

References · 4

• https://osv.dev/vulnerability/CVE-2017-12360 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12360 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex1 · Vendor Advisory
• http://securityfocus.com/bid/102001 · Note