Remote Code Execution Vulnerability in Multiple Cisco Products (CNVD-2017-35724)

Cisco WebEx Business Suite WBS30 client and so on are the client software of the video conference solution of the United States Cisco Cisco Company.WebEx Recording Format Player WRF and Advanced Recording Format Player ARF are used in it. ARF are used in which the conference recording player. A...

PT-2017-12537

Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player affected versions not specified Description A remote code execution issue exists in Cisco WebEx Network Recording Player, related to the parsing of Advanced Recording Format ARF and WebEx Recording Format W...

CVE-2017-12365: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information. The vulnerability is due to a design flaw in the product. An attacker could execute a query on an Event Center site to view scheduled meetings. A successful query would...

CVE-2017-12372: Improper Restriction of Operations within the Bounds of a Memory Buffer

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

CVE-2017-12363: Exposure of Resource to Wrong Sphere

A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system. The vulnerability is due to insufficient security settings on meetings. An attacker could exploit this vulnerability by modifying the...

CVE-2017-12367: Improper Restriction of Operations within the Bounds of a Memory Buffer

A "Cisco WebEx Network Recording Player Denial of Service Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or UR...

PT-2017-12533

Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player affected versions not specified Description A denial of service issue exists in the Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. This could be...

CVE-2017-12359: Improper Restriction of Operations within the Bounds of a Memory Buffer

A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format .arf files could allow an attacker to execute arbitrary code on a system. An attacker could exploit this vulnerability by providing a user with a malicious .arf file via email or URL and convinci...

CVE-2017-12360: Undefined Security Weakness

A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format WRF files could allow an attacker to cause a denial of service DoS condition. An attacker could exploit this vulnerability by providing a user with a malicious WRF file via email or URL and convincing the user to...

PT-2017-12532

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Center affected versions not specified Description A security issue in Cisco WebEx Meeting Center allows an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. This is due to insufficient input...

PT-2017-12524

Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player affected versions not specified Description A Buffer Overflow issue could allow an attacker to execute arbitrary code on a system by providing a malicious .arf file via email or URL, convincing the user to...

CVE-2017-12297: Improper Input Validation

A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka a "URL Redirection Vulnerability." The vulnerability is due to insufficient access control for HTTP traffic directed to the Cisco WebEx Meeting Center. An...

PT-2017-12536

Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player affected versions not specified Description A remote code execution issue exists in the Cisco WebEx Network Recording Player, affecting the handling of Advanced Recording Format ARF and WebEx Recording Form...

PT-2017-12529

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Server affected versions not specified Description A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system. The issue is...

Cisco WebEx Network Recording Player Buffer Overflow Vulnerability

A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format .arf files could allow an attacker to execute arbitrary code on a system. An attacker could exploit this vulnerability by providing a user with a malicious .arf file via email or URL and convincing the user to...

Cisco WebEx Event Center Information Disclosure Vulnerability

A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information. The vulnerability is due to a design flaw in the product. An attacker could execute a query on an Event Center site to view scheduled meetings. A successful query would...

Cisco WebEx Meeting Server Unauthorized Welcome Message Modification Vulnerability

A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system. The vulnerability is due to insufficient security settings on meetings. An attacker could exploit this vulnerability by modifying the...

Multiple Vulnerabilities in Cisco WebEx Recording Format and Advanced Recording Format Players

Multiple vulnerabilities exist in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit these vulnerabilities by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to...

Cisco WebEx Network Recording Player Denial of Service Vulnerability

A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format WRF files could allow an attacker to cause a denial of service DoS condition. An attacker could exploit this vulnerability by providing a user with a malicious WRF file via email or URL and convincing the user to...

Cisco WebEx Meeting Center URL Redirection Vulnerability

A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts. The vulnerability is due to insufficient access control for HTTP traffic directed to the Cisco WebEx Meeting Center. An attacker could exploit this vulnerability...