CVE-2018-15413

Cisco Webex Network Recording Player and Cisco Webex Player for Windows are vulnerable to remote code execution due to improper validation of ARF/WRF files. An attacker can craft a malicious ARF/WRF file and entice a user to open it, potentially executing arbitrary code in the user’s process afte...

CVE-2018-15416

CVE-2018-15416 affects Cisco Webex Network Recording Player and Cisco Webex Player for Windows. The root cause is improper validation of ARF/WRF files, enabling a crafted file to trigger arbitrary code execution when a user opens it with the affected software. Attacks require user interaction (ph...

CVE-2019-1640

Summary: CVE-2019-1640 affects Cisco Webex Network Recording Player and Webex Player for Windows. The issue is a buffer overflow caused by improper validation of ARF/WRF files, enabling an attacker to execute arbitrary code on a vulnerable system. Exploitation involves sending a user a malicious ...

CVE-2020-3413

The CVE-2020-3413 issue affects Cisco Webex Meetings, specifically the scheduled meeting template deletion feature. The root cause is insufficient authorization enforcement for requests to delete scheduled meeting templates, allowing an authenticated, remote attacker to delete a template belongin...

CVE-2019-1680

The CVE-2019-1680 issue affects Cisco Webex Business Suite pre-3.0.9 where improper input validation allows an unauthenticated, remote attacker to inject arbitrary text into a user’s browser via a malicious URL, enabling content injection and potential spoofing. Connected sources corroborate the ...

CVE-2019-1641

Cisco Webex Network Recording Player and Webex Player for Windows are affected by CVE-2019-1641. The issue stems from improper validation of ARF/WRF files, enabling arbitrary code execution when a user opens a malicious ARF/WRF file delivered via link or email attachment. Exploitation is describe...

CVE-2018-15409

Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows are affected by a vulnerability in ARF/WRF file processing that could allow remote code execution. The root cause is improper validation of ARF/WRF data, enabling an attacker to craft a malicious file or link sent...

CVE-2018-15419

The CVE-2018-15419 issue affects Cisco Webex Network Recording Player and Cisco Webex Player for Windows. The root cause is improper validation of ARF and WRF files, enabling remote code execution when a user opens a malicious ARF/WRF file delivered via a link or email attachment. Impact is arbit...

CVE-2019-1639

Cisco Webex Network Recording Player and Webex Player for Windows are affected by a vulnerability in ARF/WRF file parsing that can lead to remote code execution via a crafted ARF/WRF file or link. The ZDI advisory specifies an ARF file out-of-bounds write vulnerability that allows code execution ...