Lucene search

K
zdiB0nd @garage4hackersZDI-18-969
HistoryAug 31, 2018 - 12:00 a.m.

Cisco WebEx Network Recording Player ARF File Uninitialized Pointer Remote Code Execution Vulnerability

2018-08-3100:00:00
b0nd @garage4hackers
www.zerodayinitiative.com
8

0.002 Low

EPSS

Percentile

62.1%

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ARF files. Crafted data can trigger access to a pointer prior to initialization. An attacker can leverage this vulnerability to execute code under the context of the current process.

0.002 Low

EPSS

Percentile

62.1%

Related for ZDI-18-969