CVE-2012-3939

CVE-2012-3939 affects Cisco WebEx Recording Format (WRF) Player prior to LD SP32 EP10 for T27 and before T28.4 for T28. The issue is a memory corruption caused by buffer overflows in atas32.dll when processing crafted WRF files, enabling remote code execution (or memory corruption/DoS) if a user ...

CVE-2012-3940: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72958...

CVE-2012-3936: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCua40962...

CVE-2012-3939: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted WRF file, aka Bug ID CSCua61331...

CVE-2012-3937: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72967...

CVE-2012-3938: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz73583...

CVE-2012-3941: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Cisco WebEx Recording Format WRF player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72850...

Cisco WebEx Recording Format Player atas32.dll Memory Corruption (CVE-2012-3939)

A remote code execution vulnerability has been reported in Cisco WebEx Recording Format WRF Player. The vulnerability is due to a memory corruption when the WRF player handles specially crafted WRF files. A remote attacker can exploit this issue by enticing an affected user to open a specially...

Cisco WebEx multiple security vulnerabilities

Multiple memory corruptions and buffer overflows...

Cisco WebEx .wrf Memory Corruption

Exploit for hardware platform in category local exploits -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Cisco WebEx .wrf Memory Corruption Vulnerability 1. Advisory Information Title: Cisco WebEx .wrf Memory Corruption Vulnerabili...

Cisco Patches a Rash of Buffer Overflow and DoS Vulnerabilities

Cisco Systems released fixes for 15 vulnerabilities in three of its major product lines on Wednesday, including two different security appliances. The vulnerabilities would either allow an attacker to remotely execute code on a compromised machine, or execute a denial-of-service attack. Cisco sai...

Cisco WebEx .wrf Memory Corruption Vulnerabilty

1. Advisory Information Title: Cisco WebEx .wrf Memory Corruption Vulnerabilty Advisory ID: CORE-2012-0613 Advisory URL: http://www.coresecurity.com/content/webex-wrf-memory-corruption-vulnerability Date published: 2012-10-11 Date of last update: 2012-09-13 Vendors contacted: Cisco Release mode:...

Multiple Vulnerabilities in the Cisco WebEx Recording Format Player

The Cisco WebEx Recording Format WRF player contains six buffer overflow vulnerabilities. In some cases, exploitation of the vulnerabilities could allow a remote attacker to execute arbitrary code on the system with the privileges of a targeted user. The Cisco WebEx WRF Player is an application...

Security Experts Recommend Long, Hard Look at Disabling Java Browser Plug-In

Is the Java browser plug-in the IT equivalent of the human appendix? Would you miss it if it were gone? Probably not, experts say, especially now that attackers are beating the Java sandbox with a rash of zero-day exploits. “It’s simply safer to have the Java plug-in disabled in the browser knowi...

Cisco WebEx Recording Format Player atas32.dll Subrecords Integer Overflow (CVE-2012-1337)

A remote code execution vulnerability has been reported in Cisco WebEx Recording Format WRF Player...

Cisco WebEx Recording Format Player atdl2006.dll Buffer Overflow (CVE-2012-1335)

A remote code execution vulnerability has been reported in Cisco WebEx Recording Format WRF Player...

Cisco WebEx Recording Format Player atdl2006.dll Integer Overflow

A remote code execution vulnerability has been reported in Cisco WebEx Recording Format WRF Player...

Vulnerability in Cisco WebEx Player Could Allow Remote Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Cisco WebEx Player. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Cisco. Cisco has remediated the...

Cisco WebEx WRF Player Multiple Buffer Overflows (cisco-sa-20120627-webex)

The version of Cisco WebEx WRF Player installed on the remote host has multiple buffer overflow vulnerabilities. A remote attacker could exploit these issues by tricking a user into opening a malicious WRF file, resulting in arbitrary code execution. C Tenable Network Security, Inc...

Cisco WebEx ARF Player Buffer Overflow (cisco-sa-20120627-webex)

The version of Cisco WebEx ARF Player installed on the remote host has a buffer overflow vulnerability. A remote attacker could exploit this issue by tricking a user into opening a malicious ARF file, resulting in arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"; if...