Buffer Overflow Vulnerability in Cisco WebEx Recording Player
CVE-2018-0103

7.8HIGH

Key Information:

Vendor
Cisco
Vendor
CVE Published:
4 January 2018

Summary

A buffer overflow vulnerability exists in Cisco WebEx Network Recording Player when handling Advanced Recording Format (ARF) files. This security flaw enables local attackers to exploit the system by crafting malicious ARF files, which may be delivered via email attachments or links. If a victim unknowingly opens the malicious ARF file, the attacker could execute arbitrary code on the affected machine, thus compromising user data and system integrity. This issue impacts various Cisco WebEx products, including the Business Suite, Meetings sites, Meetings Server, and ARF player.

Affected Version(s)

Cisco WebEx Network Recording Player Cisco WebEx Network Recording Player

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.