Buffer Overflow in Cisco WebEx Recording Format Player Affects Multiple Versions
CVE-2012-3938
Currently unrated
Summary
The Cisco WebEx Recording Format (WRF) player is vulnerable to a buffer overflow that can be exploited by remote attackers. By crafting a malicious WRF file and tricking a user into opening it, an attacker could execute arbitrary code on the affected system. This exploit targets versions T27 before LD SP32 EP10 and T28 before T28.4. Users are advised to apply security updates and exercise caution when handling untrusted WRF files.
References
EPSS Score
6% chance of being exploited in the next 30 days.
Timeline
Vulnerability published
Vulnerability Reserved