Design/Logic Flaw

2014-05-0810:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON

Cisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service (application crash) via a crafted (1) .wrf or (2) .arf file that triggers a buffer over-read, aka Bug ID CSCuh52768.

CPENameOperatorVersion
webex_advanced_recording_format_playereq28.0.116
webex_advanced_recording_format_playereq29.0.116
webex_advanced_recording_format_playereq27.0.0-ld-t
webex_recording_format_playereq27.0.0-ld-t
webex_recording_format_playereq29.0.116
webex_recording_format_playereq28.0.116

Name	Operator	Version
webex_advanced_recording_format_player	eq	28.0.116
webex_advanced_recording_format_player	eq	29.0.116
webex_advanced_recording_format_player	eq	27.0.0-ld-t
webex_recording_format_player	eq	27.0.0-ld-t
webex_recording_format_player	eq	29.0.116
webex_recording_format_player	eq	28.0.116