CVE-2013-1119

Buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T27 L10N before SP32ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted DHT index value in JPEG data within a WRF file, aka...

CVE-2013-1118

Stack-based buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T27 L10N before SP32ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCuc27645...

CVE-2013-1117

CVE-2013-1117 refers to a buffer overflow in the exception handler of Cisco WebEx Recording Format (WRF) and ARF players. The vulnerability could allow remote attackers to execute arbitrary code or cause a denial of service through a crafted WRF/ARF file, as described in Cisco’s advisory (Bug ID ...

CVE-2013-1118

Cisco WebEx Recording Format (WRF) and ARF players are affected by a stack-based buffer overflow in WRF/ARF playback components (T27 LD before SP32 EP16; T27 L10N before SP32_ORION111; T28 before T28.8) that could allow remote code execution via a crafted WRF file. Affected product families inclu...

CVE-2013-1115

Cisco WebEx ARF/WRF players are affected by CVE-2013-1115 due to a buffer overflow that can lead to remote code execution or memory corruption (DoS) when processing crafted ARF files. Affected components include WebEx ARF/WRF players (T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T2...

CVE-2013-1116

Buffer overflow in Cisco WebEx Advanced Recording Format ARF player T27 LD before SP32 EP16, T27 L10N before SP32ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a crafted ARF file, aka Bug IDs CSCue74147 and...

Cisco Releases Security Advisory for Cisco WebEx Players

Cisco has released a security advisory to address multiple vulnerabilities in Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players. These vulnerabilities could allow a remote attacker to execute arbitrary code or cause a denial of service condition. US-CERT encourages users...

Multiple Vulnerabilities in the Cisco WebEx Recording Format and Advanced Recording Format Players

Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players. Exploitation of these vulnerabilities could allow a remote attacker to crash an affected player, and in some cases, could allow a remote attacker to execute arbitrary...

Cisco WebEx One-Click Client Password Encryption Information Vulnerability

Exploit for windows platform in category remote exploits include include include include unsigned char aesofbencryptunsigned char text, int length, unsigned char key, unsigned char iv unsigned char outbuf = calloc1,length; int num = 0; unsigned char liv16; memcpyliv,iv,16; AESKEY aeskey;...

Cisco WebEx One-Click Detection

The remote host has Cisco WebEx One-Click installed. WebEx One-Click is a desktop client for WebEx's meeting software. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69274; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06";...

Cisco WebEx One-Click Password Disclosure

The remote host has a version of Cisco WebEx One-Click installed that stores credentials in the registry using a key that can be easily derived. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69275; scriptversion"1.4";...

Cisco WebEx Meetings Server远程身份验证绕过漏洞(CVE-2013-3448)

BUGTRAQ ID: 61572 CVECAN ID: CVE-2013-3448 Cisco WebEx Meetings是网络会议解决方案。 Cisco WebEx Meetings Server没有检查用户账户是否是有效的，经过身份验证的远程攻击者在账户失效后继续执行会议操作即可绕过目标访问限制。 0 Cisco WebEx Meetings Server 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（CVE-2013-3448）以及相应补丁: CVE-2013-3448：Cisco WebEx Meetings Server Inactive Use...

Cisco WebEx Error Message Information Disclosure Vulnerability

A vulnerability in Cisco WebEx could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to improper error messages displayed by the affected software when handling requests to view another user's files. An attacker could exploit this vulnerability by...

CVE-2013-3448

Cisco WebEx Meetings Server does not check whether a user account is active, which allows remote authenticated users to bypass intended access restrictions by performing meeting operations after account deactivation, aka Bug ID CSCuh33315...

CVE-2013-3448

Summary: CVE-2013-3448 affects Cisco WebEx Meetings Server. The vulnerability arises because the product does not verify whether a user account is still active, allowing a remote, authenticated attacker to continue performing meeting operations after the user account has been deactivated, effecti...

CVE-2013-3448

Cisco WebEx Meetings Server does not check whether a user account is active, which allows remote authenticated users to bypass intended access restrictions by performing meeting operations after account deactivation, aka Bug ID CSCuh33315...

CVE-2013-3425

The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965...

Code injection

The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965...

CVE-2013-3425

Cisco WebEx Meeting Center 11 is affected by an information-disclosure flaw in the error handling when handling SPI file-view requests. The vulnerability allows a remote, authenticated attacker to enumerate file existence via crafted SPI calls, exposing information about files the user is not aut...

CVE-2013-3425

The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965...