ID

VAR-201210-0313

CVE

CVE-2012-3936

TITLE

Cisco WebEx Recording Format Player Vulnerable to buffer overflow

DESCRIPTION

Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCua40962. Cisco WebEx is prone to multiple remote memory-corruption vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Cisco WebEx is a set of Web conferencing tools developed by American Cisco (Cisco), which can assist office workers in different places to coordinate and cooperate. WebEx services include Web conferencing, telepresence video conferencing and enterprise instant messaging (IM). Cisco WebEx Player is used to play the WebEx meeting records recorded by participants on their computers. ---------------------------------------------------------------------- The final version of the CSI 6.0 has been released. Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/ ---------------------------------------------------------------------- TITLE: Cisco WebEx Recording Format Player Multiple Vulnerabilities SECUNIA ADVISORY ID: SA50905 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/50905/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=50905 RELEASE DATE: 2012-10-11 DISCUSS ADVISORY: http://secunia.com/advisories/50905/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/50905/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=50905 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Multiple vulnerabilities have been reported in Cisco WebEx Recording Format Player, which can be exploited by malicious people to compromise a user's system. 1) An unspecified error can be exploited to cause a buffer overflow via a specially crafted WRF file. 2) An unspecified error can be exploited to cause a buffer overflow via a specially crafted WRF file. 3) An unspecified error can be exploited to cause a buffer overflow via a specially crafted WRF file. 4) An unspecified error can be exploited to corrupt memory via a specially crafted WRF file. 5) An unspecified error can be exploited to cause a buffer overflow via a specially crafted WRF file. 6) An unspecified error can be exploited to cause a heap-based buffer overflow via a specially crafted WRF file. Successful exploitation of the vulnerabilities may allow execution of arbitrary code. The vulnerabilities are reported in the following versions: * T28 client builds prior to T28.4 (28.4) * T27 client builds prior to T27LDSP32EP10 (27.32.10) SOLUTION: Update to version 28.4 or 27.32.10. Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ PROVIDED AND/OR DISCOVERED BY: The vendor credits Beyond Security, Core Security, Codenomicon, and TELUS. ORIGINAL ADVISORY: Cisco: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-webex OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

AFFECTED PRODUCTS

CVSS

PROBLEMTYPE DATA

THREAT TYPE

remote

TYPE

buffer overflow

CONFIGURATIONS

PATCH

EXTERNAL IDS

REFERENCES

CREDITS

Beyond Security, Core Security, Codenomicon, and TELUS

SOURCES

LAST UPDATE DATE

2024-11-23T22:13:58.991000+00:00

SOURCES UPDATE DATE

SOURCES RELEASE DATE