CVE-2014-3286

CVE-2014-3286 affects Cisco WebEx Meetings Server. The vulnerability resides in the web framework’s handling of reply messages, where improper sanitization allows an unauthenticated, remote attacker to enumerate valid user accounts by sending crafted URLs. Cisco's advisory confirms the issue and ...

CVE-2014-3286

The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug IDs CSCuj81685, CSCuj81688, CSCuj81665, CSCuj81744, and CSCuj81661...

CVE-2014-2199

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5.1.131 and earlier, and WebEx Business Suite WBS 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive...

Design/Logic Flaw

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5.1.131 and earlier, and WebEx Business Suite WBS 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive...

CVE-2014-2199

CVE-2014-2199 affects Cisco WebEx components (Event Center, Meeting Center, Sales Center, Training Center, WebEx Meetings Server 1.5(.1.131) and earlier) and WebEx Business Suite; vulnerable are versions before 27.32.31.16 (27.x), before 28.12.13.18 (28.x), and before 29.5.1.12 (29.x). The vulner...

CVE-2014-2199

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5.1.131 and earlier, and WebEx Business Suite WBS 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive...

Cisco WebEx ARF Player Multiple Vulnerabilities (cisco-sa-20140507-webex)

The version of Cisco WebEx ARF Player installed on the remote host has multiple buffer overflow and memory corruption vulnerabilities. A remote attacker could exploit these issues by tricking a user into opening a malicious ARF file, resulting in denial of service or arbitrary code execution. C...

Cisco WebEx WRF Player Multiple Vulnerabilities (cisco-sa-20140507-webex)

The version of Cisco WebEx WRF Player installed on the remote host has multiple buffer overflow and memory corruption vulnerabilities. A remote attacker could exploit these issues by tricking a user into opening a malicious WRF file, resulting in denial of service or arbitrary code execution. C...

Cisco WebEx multiple security vulnerabilities

Memory corruption on different formats parsing...

Cisco Fixes Remote Code Execution Flaws in Several WebEx Products

Cisco has patched a handful of buffer overflows in several of its WebEx products that could allow an attacker to execute arbitrary code or crash a vulnerable application. The bugs affect the WebEx WRF and ARF players and some of Cisco’s Business Suite builds, WebEx 11 and WebEx Meetings Server al...

CVE-2014-2134

Heap-based buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted audio channel in a .wrf file,...

CVE-2014-2132

Cisco WebEx Recording Format WRF player and Advanced Recording Format ARF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service application crash via a crafted 1 .wrf or 2 .arf file that triggers a buffer over-read, aka Bug ID...

Design/Logic Flaw

Cisco WebEx Recording Format WRF player and Advanced Recording Format ARF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service application crash via a crafted 1 .wrf or 2 .arf file that triggers a buffer over-read, aka Bug ID...

Heap overflow

Heap-based buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted audio channel in a .wrf file,...

CVE-2014-2134

CVE-2014-2134 affects Cisco WebEx Recording Format (WRF) Player. A heap-based buffer overflow in the WRF parser allows remote attackers to corrupt memory, potentially executing arbitrary code or causing an application crash via a crafted audio channel in a .wrf file. Impact noted as remote code e...

CVE-2014-2132

Cisco WebEx Recording Format WRF player and Advanced Recording Format ARF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service application crash via a crafted 1 .wrf or 2 .arf file that triggers a buffer over-read, aka Bug ID...

CVE-2014-2134

Heap-based buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted audio channel in a .wrf file,...

CVE-2014-2132

CVE-2014-2132 affects the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players. A crafted .wrf or .arf file can trigger a buffer over-read, leading to a denial of service (application crash). Public sources assign a high impact (AV:N/AC:L/I/N/A:C) and note network delive...

Cisco Releases Security Advisory for WebEx Players

Cisco has released a security advisory to address multiple buffer overflow vulnerabilities in Cisco WebEx Recording Format and Advanced Recording Format Players. Successful exploitation of the vulnerabilities could cause an affected player to crash or allow a remote attacker to execute arbitrary...

Multiple Vulnerabilities in the Cisco WebEx Recording Format and Advanced Recording Format Players

Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players. Exploitation of these vulnerabilities could allow a remote attacker to cause an affected player to crash and, in some cases, could allow a remote attacker to execute...