CVE-2017-12372

CVE-2017-12372 is a Cisco WebEx Network Recording Player remote code execution vulnerability in ARF/WRF playback. The flaw allows a remote attacker to cause the affected WebEx players to crash and, in the worst case, execute arbitrary code on the user’s system when a malicious ARF or WRF file is ...

CVE-2017-12367

CVE-2017-12367 is a Cisco WebEx Network Recording Player vulnerability in ARF/WRF playback. A remote attacker can deliver a malicious ARF/WRF file (via email or URL) and convince a user to open it, causing the player to crash and, in some cases, potentially allowing arbitrary code execution on th...

CVE-2017-12369

CVE-2017-12369 is a Cisco WebEx Network Recording Player out-of-bounds vulnerability affecting ARF/WRF playback. A remote attacker can send a malicious ARF/WRF file (via email or URL) and persuade a user to open it, potentially crashing the player and, in some cases, enabling arbitrary code execu...

CVE-2017-12366

Cisco WebEx Meeting Center is affected by CVE-2017-12366 through insufficient input validation of parameters sent to the web server, enabling an unauthenticated, remote attacker to perform cross-site scripting (XSS). Exploitation requires convincing a user to follow a malicious link or intercepti...

Remote Code Execution Vulnerability in Multiple Cisco Products

Cisco WebEx Business Suite WBS30 client and so on are the client software of the video conference solution of the American Cisco Cisco company.WebEx Recording Format Player WRF and Advanced Recording Format Player ARF are used in it. ARF are used in which the conference recording player. A remote...

PT-2017-12531

Name of the Vulnerable Software and Affected Versions Cisco WebEx Event Center affected versions not specified Description A design flaw in the product allows an authenticated, remote attacker to view unlisted meeting information by executing a query on an Event Center site. This query can displa...

PT-2017-12536

Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player affected versions not specified Description A remote code execution issue exists in the Cisco WebEx Network Recording Player, affecting the handling of Advanced Recording Format ARF and WebEx Recording Form...

PT-2017-12526

Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player affected versions not specified Description A denial of service DoS condition could be caused by an attacker providing a malicious WebEx Recording Format WRF file to a user via email or URL, convincing them...

PT-2017-12534

Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player affected versions not specified Description A remote code execution issue exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote...

PT-2017-12535

Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player affected versions not specified Description A remote attacker could exploit this issue by providing a user with a malicious Advanced Recording Format ARF or WebEx Recording Format WRF file via email or URL...

PT-2017-12538

Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player affected versions not specified Description A remote code execution issue exists in the Cisco WebEx Network Recording Player, affecting the handling of Advanced Recording Format ARF and WebEx Recording Form...

Denial of Service Vulnerability in Multiple Cisco Products (CNVD-2017-35721)

Cisco WebEx Business Suite WBS30 client and so on are the client software of the video conference solution of the United States Cisco Cisco Company.WebEx Recording Format Player WRF and Advanced Recording Format Player ARF are used in it. ARF are used in which the conference recording player. A...

Remote Code Execution Vulnerability in Multiple Cisco Products (CNVD-2017-35723)

Cisco WebEx Business Suite WBS30 client and so on are the client software of the video conference solution of the United States Cisco Cisco Company.WebEx Recording Format Player WRF and Advanced Recording Format Player ARF are used in it. ARF are used in which the conference recording player. A...

Remote Code Execution Vulnerability in Multiple Cisco Products (CNVD-2017-35725)

Cisco WebEx Business Suite WBS30 client and so on are the client software of the video conference solution of the United States Cisco Cisco Company.WebEx Recording Format Player WRF and Advanced Recording Format Player ARF are used in it. ARF are used in which the conference recording player. A...

Remote Code Execution Vulnerability in Multiple Cisco Products (CNVD-2017-35726)

Cisco WebEx Business Suite WBS30 client and so on are the client software of the video conference solution of the United States Cisco Cisco Company.WebEx Recording Format Player WRF and Advanced Recording Format Player ARF are used in it. ARF are used in which the conference recording player. A...

CVE-2017-12370: Improper Restriction of Operations within the Bounds of a Memory Buffer

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

CVE-2017-12371: Improper Restriction of Operations within the Bounds of a Memory Buffer

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

CVE-2017-12369: Improper Restriction of Operations within the Bounds of a Memory Buffer

A "Cisco WebEx Network Recording Player Out-of-Bounds Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL an...

CVE-2017-12368: Improper Restriction of Operations within the Bounds of a Memory Buffer

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

CVE-2017-12366: Improper Neutralization of Input During Web Page Generation

A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...