Denial of Service Vulnerability in Cisco WebEx Network Recording Player
CVE-2017-12360
4.3MEDIUM
Key Information:
- Vendor
- Cisco
- Vendor
- CVE Published:
- 30 November 2017
Summary
A vulnerability in the Cisco WebEx Network Recording Player related to WRF files can be exploited by an attacker to induce a denial of service condition. By sending a malicious WRF file through email or URL, an attacker may convince the user to open it, leading to a crash in the affected player and subsequently causing a service disruption. This issue impacts Cisco WebEx Business Suite, Cisco WebEx Meetings, and the WebEx WRF Player, making it critical for users to remain aware and avoid opening untrusted files.
Affected Version(s)
Cisco WebEx Network Recording Player Cisco WebEx Network Recording Player
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved