CVE-2013-1115

2013-09-0611:15:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2013-1115

buffer overflow

cisco webex

arf player

remote code execution

denial of service

memory corruption

bug ids

nvd

8.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

71.3%

JSON

Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ARF file, aka Bug IDs CSCue74118, CSCub28371, CSCud23401, and CSCud31109.

CPENameOperatorVersion
cisco:webex_advanced_recording_format_playercisco webex advanced recording format playereq27.32.1
cisco:webex_advanced_recording_format_playercisco webex advanced recording format playereq27.21.10
cisco:webex_advanced_recording_format_playercisco webex advanced recording format playereq28.0.0
cisco:webex_advanced_recording_format_playercisco webex advanced recording format playereq27.25.10
cisco:webex_advanced_recording_format_playercisco webex advanced recording format playereq27.11.26

CPE	Name	Operator	Version
cisco:webex_advanced_recording_format_player	cisco webex advanced recording format player	eq	27.32.1
cisco:webex_advanced_recording_format_player	cisco webex advanced recording format player	eq	27.21.10
cisco:webex_advanced_recording_format_player	cisco webex advanced recording format player	eq	28.0.0
cisco:webex_advanced_recording_format_player	cisco webex advanced recording format player	eq	27.25.10
cisco:webex_advanced_recording_format_player	cisco webex advanced recording format player	eq	27.11.26