CVE-2010-3043

The CVE-2010-3043 entry concerns Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players. Affected components are the WebEx Players T27LB before SP21 EP3 and T27LC before SP22, with the root cause described as multiple buffer overflows in atas32.dll. Impacts stated are remo...

CVE-2010-3269

CVE-2010-3269 : A stack-based buffer overflow in Cisco WebEx Player for WRF/ARF formats allows remote code execution when a user opens a crafted WRF/ARF file. Affected are WebEx Player builds T27LB SP21 EP3 and T27LC SP22 (prior to these fixes). The root cause is an overflow related to handling o...

CVE-2010-3041

Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players (T27LB before SP21 EP3 and T27LC before SP22) contain multiple buffer overflow vulnerabilities in atas32.dll that can be triggered by crafted .wrf or .arf files. Affected components/files: WRF/ARF players and atas32.dl...

CVE-2010-3042

CVE-2010-3042 concerns multiple buffer overflows in Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players (T27LB before SP21 EP3 and T27LC before SP22). A crafted or file can cause a denial of service (application crash) and potentially allow arbitrary code execution. T...

CVE-2010-3044

CVE-2010-3044: Multiple buffer-overflow vulnerabilities in Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players. Affected components are the WebEx Players T27LB before SP21 EP3 and T27LC before SP22, with exploitation via crafted .wrf or .arf files, related to atas32.dll...

CVE-2010-3043: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted 1 .wrf or 2 .arf file, a...

CVE-2010-3041: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted 1 .wrf or 2 .arf file,...

CVE-2010-3269: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to execute arbitrary code via a crafted 1 .wrf or 2 .arf file, related to use of a function pointer in a...

CVE-2010-3042: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted 1 .wrf or 2 .arf file, a...

Cisco WebEx Recording Format Player multiple security vulnerabilities

Multiple vulnerabilities on .wrf / .arf files parsing...

CVE-2010-3044: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted 1 .wrf or 2 .arf file,...

ZDI-10-155: Cisco WebEx Player ARF String Parsing Remote Code Execution Vulnerability

ZDI-10-155: Cisco WebEx Player ARF String Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-155 August 23, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Cisco -- Affected Products: Cisco WebEx -- TippingPointTM IPS Customer...

Cisco WebEx Player ARF String Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists during the parsing o...