Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in several products. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the following Cisco Security Advisories and appl...

Cisco WebEx Meetings Server Denial of Service Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on a targeted system. The vulnerability is due to improper validation of user accounts by specific services. An unauthenticated, remote attacker could exploit...

Cisco WebEx Meetings Server Remote Command Execution Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to bypass security restrictions on a host located in a DMZ and inject arbitrary commands on a targeted system. The vulnerability is due to insufficient sanitization of user-supplied data processed by th...

CVE-2016-1464

Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, aka Bug ID CSCva09375...

CVE-2016-1464

Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, aka Bug ID CSCva09375...

CVE-2016-1415

Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of service application crash via a crafted file, aka Bug ID CSCuz80455...

CVE-2016-1415

Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of service application crash via a crafted file, aka Bug ID CSCuz80455...

Code injection

Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of service application crash via a crafted file, aka Bug ID CSCuz80455...

Command injection

Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, aka Bug ID CSCva09375...

CVE-2016-1415

Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of service application crash via a crafted file, aka Bug ID CSCuz80455...

CVE-2016-1464

Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, aka Bug ID CSCva09375...

CVE-2016-1464

CVE-2016-1464 affects Cisco WebEx Meetings Player (WRF support). A crafted WRF file can trigger arbitrary code execution on affected Windows builds due to improper handling of user-supplied files. Public references note an arbitrary-code-execution vulnerability with a high severity (CVSS v3.0: 7....

CVE-2016-1415

CVE-2016-1415 affects Cisco WebEx Meetings Player (Windows) with WRF file support enabled. Root cause: improper validation of user-supplied files leading to a DoS (application crash) when a crafted file is opened. Exploitation requires user interaction (social/remote delivery) to open the malicio...

CVE-2016-1464: Improper Input Validation

Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, aka Bug ID CSCva09375...

CVE-2016-1415: Undefined Security Weakness

Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of service application crash via a crafted file, aka Bug ID CSCuz80455...

PT-2016-4812

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Player version T29.10 Description The issue allows remote attackers to execute arbitrary code via a crafted file when WRF file support is enabled. Recommendations For Cisco WebEx Meetings Player version T29.10, disable WRF...

PT-2016-4771

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Player version T29.10 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a crafted file when WRF file support is enabled. Recommendations For Cisco WebEx...

Cisco WebEx Meetings Player Remote Code Execution Vulnerability

Cisco WebEx Meetings are web conferencing solutions. A security vulnerability exists in Cisco WebEx Meetings Player due to the program not properly validating user-supplied files. An unauthenticated remote user could exploit this vulnerability to execute arbitrary code with user privileges...

Cisco WebEx Meetings Player Denial of Service Vulnerability

Cisco WebEx Meetings are web conferencing solutions. A security vulnerability exists in Cisco WebEx Meetings Player due to the program not properly validating user-supplied files. Exploitation of this vulnerability by an unauthenticated remote user could cause WebEx Meetings Player to crash...

Cisco WebEx Meetings Player Arbitrary Code Execution Vulnerability

A vulnerability in Cisco WebEx Meetings Player could allow an unauthenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper handling of user-supplied files. An attacker could exploit this vulnerability by persuading a user to open a malicious WRF file by using t...