Multiple Vulnerabilities in Cisco WebEx Recording Format and Advanced Recording Format Players

Multiple vulnerabilities exist in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit these vulnerabilities by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to...

Cisco WebEx Network Recording Player ARF File RCE (cisco-sa-20170621-wnrp)

The version of Cisco WebEx Network Recording Player installed on the remote host is affected by a remote code execution vulnerability due to multiple buffer overflow conditions in the Advanced Recording Format ARF file player. An unauthenticated, remote attacker can exploit this, by convincing a...

Buffer overflow

Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format ARF files. An attacker could exploit these vulnerabilities by providing a user with a malicious ARF file via email or URL and convincing the user to launch the file. Exploitati...

CVE-2017-6669

Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format ARF files. An attacker could exploit these vulnerabilities by providing a user with a malicious ARF file via email or URL and convincing the user to launch the file. Exploitati...

CVE-2017-6669

The CVE-2017-6669 entry concerns Cisco WebEx Network Recording Player for ARF files. The vulnerability arises from multiple buffer overflow flaws in the ARF file processing code, allowing an attacker to crash the player or execute arbitrary code on a targeted user’s system. Exploitation requires ...

CVE-2017-6669

Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format ARF files. An attacker could exploit these vulnerabilities by providing a user with a malicious ARF file via email or URL and convincing the user to launch the file. Exploitati...

Cisco WebEx Network Recording Player ARF File Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Cisco WebEx Network Recording Player ARF File CImageList Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Cisco WebEx Network Recording Player ARF File Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Cisco WebEx Network Recording Player Multiple Buffer Overflow Vulnerabilities

Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format ARF files. An attacker could exploit these vulnerabilities by providing a user with a malicious ARF file via email or URL and convincing the user to launch the file. Exploitati...

Cisco WebEx ARF (Advanced Recording Format) Player Detection (Windows SMB Login)

Detects the installed version of Cisco WebEx Advanced Recording Format ARF Player. The script logs in via smb, searches for Cisco WebEx Advanced Recording Format ARF Player in the registry and gets the version from SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpte...

Cisco WebEx Advanced Recording Format (ARF) Player Multiple Vulnerabilities - Windows

Cisco WebEx Advanced Recording Format ARF Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco Webex Player T29.10 - '.ARF' Out-of-Bounds Memory Corruption

Exploit for windows platform in category dos / poc Application: Cisco Webex Player Platforms: Windows Versions: Cisco Webex Meeting Player version T29.10 Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: August 31, 2016 CVE: CVE-2016-1415...

Cisco Webex Player T29.10 - .ARF Out-of-Bounds Memory Corruption

Cisco Webex Player T29.10 - .ARF Out-of-Bounds Memory Corruption Application: Cisco Webex Player Platforms: Windows Versions: Cisco Webex Meeting Player version T29.10 Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: August 31, 2016 CVE:...

Cisco Webex Player T29.10 - '.ARF' Out-of-Bounds Memory Corruption

Application: Cisco Webex Player Platforms: Windows Versions: Cisco Webex Meeting Player version T29.10 Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: August 31, 2016 CVE: CVE-2016-1415 COSIG-2016-34 1 Introduction 2 Report Timeline 3...

Cisco WebEx ARF Player Multiple Vulnerabilities (cisco-sa-20140507-webex)

The version of Cisco WebEx ARF Player installed on the remote host has multiple buffer overflow and memory corruption vulnerabilities. A remote attacker could exploit these issues by tricking a user into opening a malicious ARF file, resulting in denial of service or arbitrary code execution. C...

CVE-2014-2136

Buffer overflow in Cisco Advanced Recording Format ARF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted .arf file, aka Bug IDs CSCui72223,...

CVE-2014-2135

Buffer overflow in Cisco Advanced Recording Format ARF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted .arf file, aka Bug IDs CSCul87216 and...

CVE-2014-2133

Buffer overflow in Cisco Advanced Recording Format ARF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted .arf file that triggers improper LZW...

Buffer overflow

Buffer overflow in Cisco Advanced Recording Format ARF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted .arf file, aka Bug IDs CSCul87216 and...