CVE-2012-3053

Summary: CVE-2012-3053 is a buffer-overflow vulnerability in Cisco WebEx ARF/WRF players that could allow remote code execution via a crafted ARF/WRF file. The issue affects Cisco WebEx ARF/WRF players across various build levels (ARF: T27, T28 lines with several SPs; WRF/ARF installers auto-upgr...

CVE-2012-3053

Buffer overflow in the Cisco WebEx Advanced Recording Format ARF player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 allows remote attackers to execute arbitrary code via a crafted ARF file, aka Bug ID CSCtz72985...

Cisco Releases Security Advisory for WebEx Player

Cisco has released a security advisory to address vulnerabilities affecting the following products: Cisco WebEx Recording Format WRF Cisco Advanced Recording Format ARF These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages...

Cisco WebEx ARF文件任意代码执行漏洞

Bugtraq ID: 54213 CVE ID: CVE-2012-3053 Cisco WebEx是Cisco公司提供的网络会议解决方案，Cisco WebEx Player用于播放与会者在电脑上所记录的WebEx会议记录。 Cisco WebEx处理ARF文件格式存在安全漏洞，允许攻击者构建恶意文件，诱使用户解析，以应用程序上下文执行任意代码。 0 Cisco WebEx Client builds 28.0.0 T28 L10N Cisco WebEx Client builds 27.32.1 T27 LD SP32 CP1及之前版本 Cisco WebEx Client...

Buffer Overflow Vulnerabilities in the Cisco WebEx Player

The Cisco WebEx Recording Format WRF player contains four buffer overflow vulnerabilities and the Cisco Advanced Recording Format ARF player contains one buffer overflow vulnerability. In some cases, exploitation of the vulnerabilities could allow a remote attacker to execute arbitrary code on th...

Cisco WebEx ARF/WRF Player Installed

Cisco WebEx ARF and/or WRF Player is/are installed on the remote host. ARF Player is used to watch recordings downloaded from WebEx. WRF Player is used to watch self-created WebEx recordings. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58620; scriptversion"1.10";...

Yet Another Google Chrome Sandbox Critical Exploit by Turkish security experts

Yet Another Google Chrome Sandbox Critical Exploit by Turkish security experts Turkish security experts from Arf Iskenderun Technologies, finds the new vulnerability open in Google Chrome 17.0.963.78 , same risk working on new update 17.0.963.79 and bypass Chrome SandBox. Last week, Vupen Securit...

CVE-2010-3043

Multiple buffer overflows in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted 1 .wrf or 2 .arf file, a...

CVE-2010-3044

Multiple buffer overflows in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted 1 .wrf or 2 .arf file,...

Stack overflow

Multiple stack-based buffer overflows in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to execute arbitrary code via a crafted 1 .wrf or 2 .arf file, related to use of a function pointer in a...

Buffer overflow

Multiple buffer overflows in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted 1 .wrf or 2 .arf file,...

Buffer overflow

Multiple buffer overflows in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted 1 .wrf or 2 .arf file,...

CVE-2010-3042

CVE-2010-3042 concerns multiple buffer overflows in Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players (T27LB before SP21 EP3 and T27LC before SP22). A crafted or file can cause a denial of service (application crash) and potentially allow arbitrary code execution. T...

CVE-2010-3269

CVE-2010-3269 : A stack-based buffer overflow in Cisco WebEx Player for WRF/ARF formats allows remote code execution when a user opens a crafted WRF/ARF file. Affected are WebEx Player builds T27LB SP21 EP3 and T27LC SP22 (prior to these fixes). The root cause is an overflow related to handling o...

CVE-2010-3044

CVE-2010-3044: Multiple buffer-overflow vulnerabilities in Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players. Affected components are the WebEx Players T27LB before SP21 EP3 and T27LC before SP22, with exploitation via crafted .wrf or .arf files, related to atas32.dll...

CVE-2010-3041

Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players (T27LB before SP21 EP3 and T27LC before SP22) contain multiple buffer overflow vulnerabilities in atas32.dll that can be triggered by crafted .wrf or .arf files. Affected components/files: WRF/ARF players and atas32.dl...

CVE-2010-3043

The CVE-2010-3043 entry concerns Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players. Affected components are the WebEx Players T27LB before SP21 EP3 and T27LC before SP22, with the root cause described as multiple buffer overflows in atas32.dll. Impacts stated are remo...

Cisco WebEx Recording Format Player multiple security vulnerabilities

Multiple vulnerabilities on .wrf / .arf files parsing...

ZDI-10-155: Cisco WebEx Player ARF String Parsing Remote Code Execution Vulnerability

ZDI-10-155: Cisco WebEx Player ARF String Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-155 August 23, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Cisco -- Affected Products: Cisco WebEx -- TippingPointTM IPS Customer...

Cisco WebEx Player ARF String Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists during the parsing o...