CVE-2010-3044

Multiple buffer overflows in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted 1 .wrf or 2 .arf file,...

CVE-2010-3042

CVE-2010-3042 concerns multiple buffer overflows in Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players (T27LB before SP21 EP3 and T27LC before SP22). A crafted or file can cause a denial of service (application crash) and potentially allow arbitrary code execution. T...

CVE-2010-3270

CVE-2010-3270 covers two WebEx vulnerabilities: a stack-based buffer overflow in Cisco WebEx Meeting Center (polling via .atp) and in WebEx Player-related .wrf/.atp handling. Public writeups (CORE-2010-1001) describe that WebEx Meeting Center T27LB before SP21 EP3 and T27LC before SP22 is suscept...

CVE-2010-3042

Multiple buffer overflows in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted 1 .wrf or 2 .arf file, a...

CVE-2010-3044

CVE-2010-3044: Multiple buffer-overflow vulnerabilities in Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players. Affected components are the WebEx Players T27LB before SP21 EP3 and T27LC before SP22, with exploitation via crafted .wrf or .arf files, related to atas32.dll...

Cisco Releases Security Advisory for Multiple Cisco WebEx Player Vulnerabilities

Cisco has released a security advisory to address multiple vulnerabilities in WebEx Recording Format WRF and Advanced Recording Format ARF Players. These vulnerabilities may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review Cisco security advisory...

Cisco Security Advisory: Multiple Cisco WebEx Player Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Cisco WebEx Player Vulnerabilities Advisory ID: cisco-sa-20110201-webex Revision 1.0 For Public Release 2011 February 1 1600 UTC GMT +--------------------------------------------------------------------- Summary...

[CORE-2010-1001] Cisco WebEx .atp and .wrf Overflow Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - Corelabs Advisory http://corelabs.coresecurity.com/ Cisco WebEx .atp and .wrf Overflow Vulnerabilities 1. Advisory Information Title: Cisco WebEx .atp and .wrf Overflow Vulnerabilities Advisory ID: CORE-2010-1001 Advisory...

Cisco WebEx Recording Format Player multiple security vulnerabilities

Multiple vulnerabilities on .wrf / .arf files parsing...

Multiple Cisco WebEx Player Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco WebEx .atp and .wrf Overflow Vulnerabilities

Core Security Technologies - Corelabs Advisory Cisco WebEx .atp and .wrf Overflow Vulnerabilities 1. Advisory Information Title: Cisco WebEx .atp and .wrf Overflow Vulnerabilities Advisory ID: CORE-2010-1001 Advisory URL:...

Cisco WebEx Meeting Manager UCF - 'atucfobj.dll' ActiveX NewObject Method Buffer Overflow (Metasploit)

$Id: webexucfnewobject.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

ZDI-10-155: Cisco WebEx Player ARF String Parsing Remote Code Execution Vulnerability

ZDI-10-155: Cisco WebEx Player ARF String Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-155 August 23, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Cisco -- Affected Products: Cisco WebEx -- TippingPointTM IPS Customer...

Cisco WebEx Player ARF String Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists during the parsing o...

WebEx UCF atucfobj.dll ActiveX NewObject Method Buffer Overflow

This module exploits a stack-based buffer overflow in WebEx's WebexUCFObject ActiveX Control. If a long string is passed to the 'NewObject' method, a stack- based buffer overflow will occur when copying attacker-supplied data using the sprintf function. It is noteworthy that this vulnerability wa...

WebEx UCF atucfobj.dll ActiveX NewObject Method Buffer Overflow

$Id: webexucfnewobject.rb 8712 2010-03-04 17:41:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Heap overflow

Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 aka T26SP49EP32 for Windows, 27.x before 27.10.x aka T27SP10 for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a deni...

CVE-2009-2879

Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 aka T26SP49EP32 for Windows, 27.x before 27.10.x aka T27SP10 for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a deni...

CVE-2009-2877

Stack-based buffer overflow in ataudio.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x aka T27SP10 for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service...

CVE-2009-2878

Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 aka T26SP49EP32 for Windows, 27.x before 27.10.x aka T27SP10 for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a deni...