Cisco Releases Security Advisory for WebEx Player

Cisco has released a security advisory to address vulnerabilities affecting the following products: Cisco WebEx Recording Format WRF Cisco Advanced Recording Format ARF These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages...

Buffer Overflow Vulnerabilities in the Cisco WebEx Player

The Cisco WebEx Recording Format WRF player contains four buffer overflow vulnerabilities and the Cisco Advanced Recording Format ARF player contains one buffer overflow vulnerability. In some cases, exploitation of the vulnerabilities could allow a remote attacker to execute arbitrary code on th...

Cisco WebEx Player buffer overflow

Buffer overflow on .WRF files parsing...

Cisco WebEx WRF文件格式缓冲区溢出漏洞

Bugtraq ID: 52882 CVE ID：CVE-2012-1335 Cisco WebEx是Cisco公司提供的网络会议解决方案，Cisco WebEx Player用于播放与会者在电脑上所记录的WebEx会议记录 Cisco WebEx Player存在多个缓冲区溢出问题，允许攻击者以应用程序上下文执行任意代码 攻击者可以构建恶意WRF文件，诱使用户解析来触发此漏洞 0 Cisco WebEx Windows T27 LD SP32 Cisco WebEx Windows T27 LC SP25 EP9 Cisco WebEx Windows T27 LB SP21 EP10...

Cisco WebEx ARF/WRF Player Installed

Cisco WebEx ARF and/or WRF Player is/are installed on the remote host. ARF Player is used to watch recordings downloaded from WebEx. WRF Player is used to watch self-created WebEx recordings. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58620; scriptversion"1.10";...

Cisco WebEx WRF Player Multiple Buffer Overflows (cisco-sa-20120404-webex)

The version of Cisco WebEx WRF Player installed on the remote host has multiple buffer overflow vulnerabilities. An attacker could exploit these issues by tricking a user into opening a malicious WRF file, resulting in arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"...

CVE-2012-1336

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1335 and...

CVE-2012-1337

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1335 and...

Buffer overflow

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1335 and...

Buffer overflow

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1335 and...

Buffer overflow

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1336 and...

CVE-2012-1335

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1336 and...

CVE-2012-1336

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1335 and...

CVE-2012-1336

CVE-2012-1335/1336/1337 pertain to buffer/heap overflows in the Cisco WebEx Recording Format (WRF) Player (atas32.dll and related components) across Windows/macOS/Linux T27 variants. The root cause cited in a checkpoint advisory (CVE-2012-1336) and follow-ons describes an integer overflow that le...

CVE-2012-1337

CVE-2012-1337 is a vulnerability in Cisco WebEx Recording Format (WRF) Player where a buffer overflow in the WRF parser (ATAS32/related code paths) allows remote code execution via a crafted WRF file. Affected are multiple T27 builds across Windows, macOS, and Linux (e.g., L/LB/LC/LD branches wit...

CVE-2012-1337

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1335 and...

CVE-2012-1335

The CVE-2012-1335, CVE-2012-1336, and CVE-2012-1337 flaws affect Cisco WebEx Recording Format (WRF) Player. The issues are buffer/heap buffer overflows in the WRF Player (notably involving atas32.dll on Windows) triggered by processing crafted WRF files, permitting remote code execution. Affected...

ZDI-11-341 : Cisco WebEx Player WRF Type 0 Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-341 : Cisco WebEx Player WRF Type 0 Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-341 December 7, 2011 - -- CVE ID: CVE-2011-3319 - -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C - -- Affected Vendors:...

Cisco WebEx Player WRF Type 0 Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within atdl2006.dll...

ZDI-11-308 : Cisco WebEx Player ATAS32.DLL linesProcessed Remote Code Execution Vulnerability

ZDI-11-308 : Cisco WebEx Player ATAS32.DLL linesProcessed Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-308 October 26, 2011 -- CVE ID: CVE-2011-4004 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Cisco -- Affected Products: Cisco WebEx --...