PT-2012-5076

Name of the Vulnerable Software and Affected Versions Cisco WebEx Recording Format WRF player T27 before LD SP32 EP10 Cisco WebEx Recording Format WRF player T28 before T28.4 Description The issue is related to a buffer overflow in the Cisco WebEx Recording Format WRF player, which allows remote...

PT-2012-5079

Name of the Vulnerable Software and Affected Versions Cisco WebEx Recording Format WRF player versions T27 before LD SP32 EP10 Cisco WebEx Recording Format WRF player versions T28 before T28.4 Description The issue allows remote attackers to execute arbitrary code via a crafted file...

PT-2012-5078

Name of the Vulnerable Software and Affected Versions Cisco WebEx Recording Format WRF player T27 before LD SP32 EP10 Cisco WebEx Recording Format WRF player T28 before T28.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory...

CVE-2012-3939: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted WRF file, aka Bug ID CSCua61331...

CVE-2012-3941: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Cisco WebEx Recording Format WRF player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72850...

CVE-2012-3940: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72958...

CVE-2012-3936: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCua40962...

CVE-2012-3937: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72967...

CVE-2012-3938: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz73583...

PT-2012-5080

Name of the Vulnerable Software and Affected Versions Cisco WebEx Recording Format WRF player versions prior to T27 LD SP32 EP10 Cisco WebEx Recording Format WRF player versions prior to T28.4 Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via a...

Cisco WebEx Recording Format Player atas32.dll Memory Corruption (CVE-2012-3939)

A remote code execution vulnerability has been reported in Cisco WebEx Recording Format WRF Player. The vulnerability is due to a memory corruption when the WRF player handles specially crafted WRF files. A remote attacker can exploit this issue by enticing an affected user to open a specially...

Cisco WebEx multiple security vulnerabilities

Multiple memory corruptions and buffer overflows...

Cisco WebEx .wrf Memory Corruption

Exploit for hardware platform in category local exploits -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Cisco WebEx .wrf Memory Corruption Vulnerability 1. Advisory Information Title: Cisco WebEx .wrf Memory Corruption Vulnerabili...

Cisco Patches a Rash of Buffer Overflow and DoS Vulnerabilities

Cisco Systems released fixes for 15 vulnerabilities in three of its major product lines on Wednesday, including two different security appliances. The vulnerabilities would either allow an attacker to remotely execute code on a compromised machine, or execute a denial-of-service attack. Cisco sai...

Cisco WebEx .wrf Memory Corruption Vulnerabilty

1. Advisory Information Title: Cisco WebEx .wrf Memory Corruption Vulnerabilty Advisory ID: CORE-2012-0613 Advisory URL: http://www.coresecurity.com/content/webex-wrf-memory-corruption-vulnerability Date published: 2012-10-11 Date of last update: 2012-09-13 Vendors contacted: Cisco Release mode:...

Multiple Vulnerabilities in the Cisco WebEx Recording Format Player

The Cisco WebEx Recording Format WRF player contains six buffer overflow vulnerabilities. In some cases, exploitation of the vulnerabilities could allow a remote attacker to execute arbitrary code on the system with the privileges of a targeted user. The Cisco WebEx WRF Player is an application...

Security Experts Recommend Long, Hard Look at Disabling Java Browser Plug-In

Is the Java browser plug-in the IT equivalent of the human appendix? Would you miss it if it were gone? Probably not, experts say, especially now that attackers are beating the Java sandbox with a rash of zero-day exploits. “It’s simply safer to have the Java plug-in disabled in the browser knowi...

Cisco WebEx Recording Format Player atdl2006.dll Buffer Overflow (CVE-2012-1335)

A remote code execution vulnerability has been reported in Cisco WebEx Recording Format WRF Player...

Cisco WebEx Recording Format Player atas32.dll Subrecords Integer Overflow (CVE-2012-1337)

A remote code execution vulnerability has been reported in Cisco WebEx Recording Format WRF Player...

Cisco WebEx Recording Format Player atdl2006.dll Integer Overflow

A remote code execution vulnerability has been reported in Cisco WebEx Recording Format WRF Player...