PT-2018-1854

Name of the Vulnerable Software and Affected Versions Cisco Webex Network Recording Player for Microsoft Windows affected versions not specified Cisco Webex Player for Microsoft Windows affected versions not specified Description A vulnerability exists due to the improper validation of Advanced...

PT-2018-1778

Name of the Vulnerable Software and Affected Versions Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows affected versions not specified Description A vulnerability in the Cisco Webex software could allow an attacker to execute arbitrary code on an affected system...

PT-2018-1856

Name of the Vulnerable Software and Affected Versions Cisco Webex Network Recording Player for Microsoft Windows affected versions not specified Cisco Webex Player for Microsoft Windows affected versions not specified Description A vulnerability exists due to improper validation of Advanced...

PT-2018-13020

Name of the Vulnerable Software and Affected Versions Cisco Webex Network Recording Player for Microsoft Windows affected versions not specified Cisco Webex Player for Microsoft Windows affected versions not specified Description A vulnerability exists due to improper validation of Advanced...

PT-2018-13022

Name of the Vulnerable Software and Affected Versions Cisco Webex Network Recording Player for Microsoft Windows affected versions not specified Cisco Webex Player for Microsoft Windows affected versions not specified Description A vulnerability exists due to improper validation of Advanced...

PT-2018-13023

Name of the Vulnerable Software and Affected Versions Cisco Webex Network Recording Player for Microsoft Windows affected versions not specified Cisco Webex Player for Microsoft Windows affected versions not specified Description A vulnerability exists due to improper validation of Advanced...

Cisco Webex Player WRF File Denial of Service Vulnerability

Cisco Webex Meetings Suite is an all-in-one videoconferencing solution, and Webex Player is one of the players dedicated to playing back recorded video from meetings. A resource management error vulnerability exists in Cisco Webex Player's handling of Webex Recording Format WRF files. A remote...

Cisco Webex Player WRF Files Denial of Service Vulnerability

A vulnerability in the Cisco Webex Player for Webex Recording Format WRF files could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. An attacker could exploit this vulnerability by sending a user a link or email attachment with a malicious WRF file and...

Cisco WebEx Meetings Server Denial of Service Vulnerability (CNVD-2018-14207)

Cisco Webex Meetings Suite sites, Webex Meetings Online sites, and Webex Meetings Server are all versatile video conferencing solutions from Cisco.Webex Network Recording Player Webex Network Recording Player for Advanced Recording Format ARF and Webex Recording Format WRF is one of the media...

CVE-2018-0380

Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format ARF and Webex Recording Format WRF files. An attacker could exploit these vulnerabilities by providing a user with a malicious .arf or .wrf file via email or URL and convincing the user to...

Cisco WebEx Business Suite meeting sites and WebEx Meetings sites WebEx Recording Format Player information disclosure vulnerability

Cisco WebEx Business Suite meeting sites and WebEx Meetings sites are video conferencing solutions from Cisco.WebEx Recording Format WRF Player is one of the players, which is mainly used to play WRF WebEx Recording Format WRF Player is one of the players, which is mainly used to play the WRF...

Cisco WebEx Network Recording Player Buffer Overflow Vulnerability (CNVD-2018-02227)

Cisco WebEx Network Recording Player is an application used to play back WebEx meeting minutes recorded on the computers of online meeting participants. A buffer overflow vulnerability exists in Cisco WebEx Network Recording Player. A local attacker could exploit this vulnerability by sending a...

Cisco Webex Player T29.10 - '.ARF' Out-of-Bounds Memory Corruption

Exploit for windows platform in category dos / poc Application: Cisco Webex Player Platforms: Windows Versions: Cisco Webex Meeting Player version T29.10 Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: August 31, 2016 CVE: CVE-2016-1415...

Cisco Webex Player T29.10 - '.WRF' Use-After-Free Memory Corruption

Exploit for windows platform in category dos / poc Application: Cisco Webex Player Platforms: Windows Versions: Cisco Webex Meeting Player version T29.10 Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: August 31, 2016 CVE: CVE-2016-1464...

Cisco Webex Player T29.10 - .ARF Out-of-Bounds Memory Corruption

Cisco Webex Player T29.10 - .ARF Out-of-Bounds Memory Corruption Application: Cisco Webex Player Platforms: Windows Versions: Cisco Webex Meeting Player version T29.10 Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: August 31, 2016 CVE:...

Cisco Webex Player T29.10 - .WRF Use-After-Free Memory Corruption

Cisco Webex Player T29.10 - .WRF Use-After-Free Memory Corruption Application: Cisco Webex Player Platforms: Windows Versions: Cisco Webex Meeting Player version T29.10 Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: August 31, 2016 CVE:...

Cisco Webex Player T29.10 - '.ARF' Out-of-Bounds Memory Corruption

Application: Cisco Webex Player Platforms: Windows Versions: Cisco Webex Meeting Player version T29.10 Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: August 31, 2016 CVE: CVE-2016-1415 COSIG-2016-34 1 Introduction 2 Report Timeline 3...

Cisco Webex Player T29.10 - '.WRF' Use-After-Free Memory Corruption

Application: Cisco Webex Player Platforms: Windows Versions: Cisco Webex Meeting Player version T29.10 Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: August 31, 2016 CVE: CVE-2016-1464 COSIG-2016-33 1 Introduction 2 Report Timeline 3...

Cisco WebEx Player ATAS32.DLL Remote Code Execution (CVE-2011-4004)

A remote code execution vulnerability has been reported in Cisco WebEx Player. The vulnerability is due to insufficient validation of some values in record Type 0x1F and Type 0xBB while processing WebEx Recording Format WRF files. A remote unauthenticated attacker can leverage this vulnerability ...

Cisco WebEx .wrf Memory Corruption

Exploit for hardware platform in category local exploits -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Cisco WebEx .wrf Memory Corruption Vulnerability 1. Advisory Information Title: Cisco WebEx .wrf Memory Corruption Vulnerabili...