Multiple Vulnerabilities in Cisco Webex Recording Players for ARF and WRF Files

CVE-2018-0380

Summary

Multiple vulnerabilities are found in the Cisco Webex Network Recording Player when handling Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. These vulnerabilities could be exploited by attackers who send a user a malicious .arf or .wrf file through email or a URL, tricking them into opening it in the Webex recording players. Such exploitation can cause the player to crash, leading to a denial of service (DoS) condition. The Webex Network Recording Player for ARF files may automatically install when users access a recording on a Webex server, while WRF players need to be downloaded manually. These vulnerabilities affect multiple Webex products, including those hosted on Cisco Webex Meetings Suite, Online, and Server.

References