Lucene search

K
nvd[email protected]NVD:CVE-2012-3937
HistoryOct 25, 2012 - 2:55 p.m.

CVE-2012-3937

2012-10-2514:55:03
CWE-119
web.nvd.nist.gov
2

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.036 Low

EPSS

Percentile

91.7%

Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72967.

Affected configurations

NVD
Node
ciscowebex_recording_format_playerMatch27.11.26
OR
ciscowebex_recording_format_playerMatch27.21.10
OR
ciscowebex_recording_format_playerMatch27.25.10
OR
ciscowebex_recording_format_playerMatch27.32.1
OR
ciscowebex_recording_format_playerMatch28.0.0

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.036 Low

EPSS

Percentile

91.7%