CVE-2017-12367

CVE-2017-12367 is a Cisco WebEx Network Recording Player vulnerability in ARF/WRF playback. A remote attacker can deliver a malicious ARF/WRF file (via email or URL) and convince a user to open it, causing the player to crash and, in some cases, potentially allowing arbitrary code execution on th...

CVE-2017-12368

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

CVE-2017-12372

CVE-2017-12372 is a Cisco WebEx Network Recording Player remote code execution vulnerability in ARF/WRF playback. The flaw allows a remote attacker to cause the affected WebEx players to crash and, in the worst case, execute arbitrary code on the user’s system when a malicious ARF or WRF file is ...

CVE-2017-12370

Cisco WebEx Network Recording Player/WRF ARF processing vulnerabilities (CVE-2017-12370) enable heap-based buffer overflow leading to remote code execution. A remote attacker can lure a user to open a malicious ARF/WRF file (via email/URL); user interaction is required. Affected: WebEx Recorder a...

CVE-2017-12360

CVE-2017-12360 is a vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format (WRF) files. The issue allows a remote attacker to cause a denial-of-service by convincing a user to open a malicious WRF file (delivered via email or URL), causing the affected WebEx Player to cr...

CVE-2017-12366

Cisco WebEx Meeting Center is affected by CVE-2017-12366 through insufficient input validation of parameters sent to the web server, enabling an unauthenticated, remote attacker to perform cross-site scripting (XSS). Exploitation requires convincing a user to follow a malicious link or intercepti...

CVE-2017-12372

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

CVE-2017-12368

The CVE-2017-12368 entry covers a vulnerability in Cisco WebEx Network Recording Player for ARF/WRF files that enables remote code execution. The flaw is triggered when a user opens a malicious ARF or WRF file delivered via email or a URL, potentially leading to arbitrary code execution on the ta...

CVE-2017-12363

CVE-2017-12363 affects Cisco WebEx Meeting Server. The vulnerability allows an unauthenticated, remote attacker to modify the welcome message of a meeting due to insufficient security settings on meetings. Connected documents confirm the impact is via modification of meeting welcome messages and ...

CVE-2017-12297

CVE-2017-12297 affects Cisco WebEx Meeting Center and is described as a URL redirection vulnerability caused by insufficient access control on HTTP traffic directed to the Meeting Center. An authenticated, remote attacker could exploit a crafted URL to cause the Meeting Center to initiate connect...

CVE-2017-12359

A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format .arf files could allow an attacker to execute arbitrary code on a system. An attacker could exploit this vulnerability by providing a user with a malicious .arf file via email or URL and convinci...

CVE-2017-12369

CVE-2017-12369 is a Cisco WebEx Network Recording Player out-of-bounds vulnerability affecting ARF/WRF playback. A remote attacker can send a malicious ARF/WRF file (via email or URL) and persuade a user to open it, potentially crashing the player and, in some cases, enabling arbitrary code execu...

CVE-2017-12371

CVE-2017-12371 is a remote code execution flaw in Cisco WebEx Network Recording Player caused by parsing flaws in ARF/WRF files. ZDI advisories describe ARF/WRF processing issues (uninitialized memory, heap-based/buffer overflows) that allow code execution when a user opens a crafted file (e.g., ...

CVE-2017-12371

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

CVE-2017-12363

A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system. The vulnerability is due to insufficient security settings on meetings. An attacker could exploit this vulnerability by modifying the...

CVE-2017-12360

A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format WRF files could allow an attacker to cause a denial of service DoS condition. An attacker could exploit this vulnerability by providing a user with a malicious WRF file via email or URL and convincing the user to...

CVE-2017-12359

Converging sources confirm CVE-2017-12359 is a buffer overflow in the Cisco WebEx Network Recording Player for Advanced Recording Format (.arf) files. The vulnerability allows an attacker to achieve arbitrary code execution on a target system by convincing a user to open a malicious .arf file del...

CVE-2017-12369

A "Cisco WebEx Network Recording Player Out-of-Bounds Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL an...

CVE-2017-12297

A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka a "URL Redirection Vulnerability." The vulnerability is due to insufficient access control for HTTP traffic directed to the Cisco WebEx Meeting Center. An...

CVE-2017-12365

A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information. The vulnerability is due to a design flaw in the product. An attacker could execute a query on an Event Center site to view scheduled meetings. A successful query would...