PT-2018-8801 · Cisco · Cisco Webex Network Recording Player

Published 2018-07-18 · Updated 2019-10-09 · CVE-2018-0380

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webex Recording Format (WRF) files (affected versions not specified)

Description The issue affects the Cisco Webex Network Recording Player, allowing an attacker to exploit vulnerabilities by providing a user with a malicious .arf or .wrf file. This could cause the affected player to crash, resulting in a denial of service (DoS) condition. The players are used to play back Webex meetings that have been recorded by an online meeting attendee. The vulnerabilities exist in the players available from Cisco Webex Meetings Suite sites, Cisco Webex Meetings Online sites, and Cisco Webex Meetings Server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2018-0380

Affected Products

Cisco Webex Network Recording Player

References · 5

• https://osv.dev/vulnerability/CVE-2018-0380 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-webex-dos · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0380 · Security Note
• http://securitytracker.com/id/1041351 · Note
• http://securityfocus.com/bid/104880 · Note