EUVD-2016-7370

Malware in sbrugna...

EUVD-2017-3839

Malware in sbrugna...

Input validation

A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow an authenticated, local attacker to run an executable file with privileges equivalent to those of Cisco Meeting App. The vulnerability is due to incomplete input validation of the path name for DLL...

CVE-2017-12266

A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow an authenticated, local attacker to run an executable file with privileges equivalent to those of Cisco Meeting App. The vulnerability is due to incomplete input validation of the path name for DLL...

CVE-2017-12266

Cisco Meeting App for Windows is affected by an elevation-of-privilege flaw in the DLL-loading path validation. The issue stems from incomplete input validation of DLL file paths before loading, allowing a local, authenticated user to place a crafted DLL in a system directory and execute commands...

PT-2017-12441

Name of the Vulnerable Software and Affected Versions Cisco Meeting App for Windows affected versions not specified Description The issue is related to incomplete input validation of the path name for DLL files before they are loaded, which could allow an authenticated, local attacker to run an...

CVE-2017-12266: Uncontrolled Search Path Element

A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow an authenticated, local attacker to run an executable file with privileges equivalent to those of Cisco Meeting App. The vulnerability is due to incomplete input validation of the path name for DLL...

Cisco Meeting App Local Privilege Escalation Vulnerability

A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow an authenticated, local attacker to run an executable file with privileges equivalent to those of Cisco Meeting App. The vulnerability is due to incomplete input validation of the path name for DLL...

CVE-2016-6447

A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This vulnerability affects the following products: Cisco Meeting Server releases prior to 2.0.1, Acano Server releases prior to 1.8.16 and prior...

CVE-2016-6447

A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This vulnerability affects the following products: Cisco Meeting Server releases prior to 2.0.1, Acano Server releases prior to 1.8.16 and prior...

CVE-2016-6447

A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This vulnerability affects the following products: Cisco Meeting Server releases prior to 2.0.1, Acano Server releases prior to 1.8.16 and prior...

CVE-2016-6447: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This vulnerability affects the following products: Cisco Meeting Server releases prior to 2.0.1, Acano Server releases prior to 1.8.16 and prior...

PT-2016-6920

Name of the Vulnerable Software and Affected Versions Cisco Meeting Server versions prior to 2.0.1 Acano Server versions prior to 1.8.16 Acano Server versions prior to 1.9.3 Cisco Meeting App versions prior to 1.9.8 Acano Meeting Apps versions prior to 1.8.35 Description A vulnerability in Cisco...