Buffer Overflow Vulnerabilities in Cisco WebEx Network Recording Player

CVE-2017-6669

Summary

Multiple buffer overflow vulnerabilities are present in the Cisco WebEx Network Recording Player, affecting users who open malicious Advanced Recording Format (ARF) files. An attacker could exploit these vulnerabilities by enticing a user to launch a compromised ARF file, potentially leading to a crash of the recording player or allowing the execution of arbitrary code on the affected system. The player is typically installed automatically when a recording file hosted on a WebEx server is accessed. It is critical for users of the Cisco WebEx Business Suite to ensure they are using the latest client builds to mitigate these risks.

References