CVE-2019-1641

Cisco Webex Network Recording Player and Webex Player for Windows are affected by CVE-2019-1641. The issue stems from improper validation of ARF/WRF files, enabling arbitrary code execution when a user opens a malicious ARF/WRF file delivered via link or email attachment. Exploitation is describe...

CVE-2019-1638

CVE-2019-1638 refers to multiple Cisco Webex-related RCE issues in the Windows players. The root cause is improper validation of ARF/WRF files in the Cisco Webex Network Recording Player and Webex Player for Windows, allowing arbitrary code execution when a user opens a crafted ARF/WRF file or vi...

CVE-2019-1639 Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...

CVE-2019-1639

Cisco Webex Network Recording Player and Webex Player for Windows are affected by a vulnerability in ARF/WRF file parsing that can lead to remote code execution via a crafted ARF/WRF file or link. The ZDI advisory specifies an ARF file out-of-bounds write vulnerability that allows code execution ...

CVE-2019-1638 Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...

CVE-2019-1636 Cisco Webex Teams URI Handler Insecure Library Loading Vulnerability

A vulnerability in the Cisco Webex Teams client, formerly Cisco Spark, could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows operating systems. An attacker could exploit...

CVE-2019-1640

Summary: CVE-2019-1640 affects Cisco Webex Network Recording Player and Webex Player for Windows. The issue is a buffer overflow caused by improper validation of ARF/WRF files, enabling an attacker to execute arbitrary code on a vulnerable system. Exploitation involves sending a user a malicious ...

CVE-2019-1636

Cisco Webex Teams (formerly Cisco Spark) is affected by CVE-2019-1636, an insecure library loading vulnerability in the Webex Teams URI handler. The issue arises from unsafe search paths used by the Windows URI, allowing a crafted library placed in a targeted directory to be loaded by the applica...

CVE-2019-1637 Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...

CVE-2019-1637

The CVE-2019-1637 issue affects Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows, caused by improper validation of ARF/WRF files. A malicious ARF/WRF file delivered via link or email and opened by the user could allow arbitrary code execution on the affected sys...

CVE-2019-1641 Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...

CVE-2019-1636

A vulnerability in the Cisco Webex Teams client, formerly Cisco Spark, could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows operating systems. An attacker could exploit...

Design/Logic Flaw

A vulnerability in the Cisco Webex Teams client, formerly Cisco Spark, could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows operating systems. An attacker could exploit...

CVE-2019-1636

A vulnerability in the Cisco Webex Teams client, formerly Cisco Spark, could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows operating systems. An attacker could exploit...

Cisco Webex Meetings Server Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient validation...

Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities

Multiple vulnerabilities in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist because the affected software improperly validates Advance...

Cisco Webex Teams URI Handler Insecure Library Loading Vulnerability

A vulnerability in the Cisco Webex Teams client, formerly Cisco Spark, could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows operating systems. An attacker could exploit...

PT-2019-1293

Name of the Vulnerable Software and Affected Versions Cisco Webex Network Recording Player for Microsoft Windows affected versions not specified Cisco Webex Player for Microsoft Windows affected versions not specified Description A vulnerability exists in the Cisco Webex Network Recording Player...

PT-2019-1294

Name of the Vulnerable Software and Affected Versions Cisco Webex Network Recording Player versions affected versions not specified Cisco Webex Player versions affected versions not specified Description The issue is caused by a buffer overflow in memory, allowing an attacker to execute arbitrary...

CVE-2019-1636: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the Cisco Webex Teams client, formerly Cisco Spark, could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows operating systems. An attacker could exploit...