CVE-2014-2134

Heap-based buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted audio channel in a .wrf file,...

CVE-2014-2132

CVE-2014-2132 affects the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players. A crafted .wrf or .arf file can trigger a buffer over-read, leading to a denial of service (application crash). Public sources assign a high impact (AV:N/AC:L/I/N/A:C) and note network delive...

CVE-2014-2134

CVE-2014-2134 affects Cisco WebEx Recording Format (WRF) Player. A heap-based buffer overflow in the WRF parser allows remote attackers to corrupt memory, potentially executing arbitrary code or causing an application crash via a crafted audio channel in a .wrf file. Impact noted as remote code e...

PT-2014-4497

Name of the Vulnerable Software and Affected Versions Cisco WebEx Recording Format WRF player and Advanced Recording Format ARF player versions T27 LD before SP32 EP16 Cisco WebEx Recording Format WRF player and Advanced Recording Format ARF player versions T28 before T28.12 Cisco WebEx Recording...

PT-2014-4499

Name of the Vulnerable Software and Affected Versions Cisco WebEx Recording Format WRF player versions prior to T27 SP32 EP16 Cisco WebEx Recording Format WRF player versions prior to T28.12 Cisco WebEx Recording Format WRF player versions prior to T29.2 Description A heap-based buffer overflow...

Cisco Releases Security Advisory for WebEx Players

Cisco has released a security advisory to address multiple buffer overflow vulnerabilities in Cisco WebEx Recording Format and Advanced Recording Format Players. Successful exploitation of the vulnerabilities could cause an affected player to crash or allow a remote attacker to execute arbitrary...

CVE-2014-2134: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted audio channel in a .wrf file,...

CVE-2014-2132: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco WebEx Recording Format WRF player and Advanced Recording Format ARF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service application crash via a crafted 1 .wrf or 2 .arf file that triggers a buffer over-read, aka Bug ID...

Multiple Vulnerabilities in the Cisco WebEx Recording Format and Advanced Recording Format Players

Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players. Exploitation of these vulnerabilities could allow a remote attacker to cause an affected player to crash and, in some cases, could allow a remote attacker to execute...

Cisco WebEx Meetings Server Cross-Site Request Forgery Vulnerability

A vulnerability in the web framework code of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by convincing the...

CVE-2014-2186

Cross-site request forgery CSRF vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj81777...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj81777...

CVE-2014-2186

Cross-site request forgery CSRF vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj81777...

CVE-2014-2186

CVE-2014-2186 concerns Cisco WebEx Meetings Server and is described in Cisco’s advisory as a Cross-Site Request Forgery (CSRF) vulnerability arising from insufficient CSRF protections in the web framework. An unauthenticated, remote attacker could entice a logged-in user to follow a malicious lin...

PT-2014-4543

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description A cross-site request forgery CSRF issue in the web framework allows remote attackers to hijack the authentication of arbitrary users. Recommendations At the moment, there ...

CVE-2014-2186: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj81777...

Cisco WebEx UCF atucfobj.dll ActiveX NewObject Buffer Overflow - Ver2 (CVE-2008-3558)

A buffer overflow vulnerability has been reported in Cisco Webex Meeting Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

BlackBerry, Cisco Products Vulnerable to OpenSSL Bug

Vendors are continuing to check their products for potential effects from the OpenSSL heartbleed vulnerability, and both Cisco and BlackBerry have found that a variety of their products contain a vulnerable version of the software. BlackBerry on Thursday said that several of its software products...

CVE-2014-0708

WebEx Meeting Center in Cisco WebEx Business Suite does not properly compose URLs for HTTP GET requests, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 a browser's history, aka Bug ID CSCul98272...

Design/Logic Flaw

WebEx Meeting Center in Cisco WebEx Business Suite does not properly compose URLs for HTTP GET requests, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 a browser's history, aka Bug ID CSCul98272...