Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.3
CVSSv2

CVE-2010-3269

Published: 02/02/2011 Updated: 10/10/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Subscribe to Cisco

Vulnerability Summary

Multiple stack-based buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote malicious users to execute arbitrary code via a crafted (1) .wrf or (2) .arf file, related to use of a function pointer in a callback mechanism.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco webex recording format player 27.10

cisco webex recording format player 27.11.0.3328

cisco webex recording format player 27.13

cisco webex recording format player 26.49

cisco webex recording format player 27.12

cisco webex advanced recording format player 27.13

cisco webex advanced recording format player 26.49

cisco webex advanced recording format player 27.12

cisco webex advanced recording format player 27.10

cisco webex advanced recording format player 27.11.0.3328

Vendor Advisories

Cisco: Multiple Cisco WebEx Player Vulnerabilities
Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players In some cases, exploitation of the vulnerabilities could allow a remote attacker to execute arbitrary code on the system of a targeted user The Cisco WebEx Players are applications that are used to ...

References

CWE-119http://securitytracker.com/id?1025015http://www.vupen.com/english/advisories/2011/0261http://www.coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabilitieshttp://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtmlhttp://tools.cisco.com/security/center/viewAlert.x?alertId=22016http://www.securityfocus.com/bid/46075https://exchange.xforce.ibmcloud.com/vulnerabilities/65076http://www.securityfocus.com/archive/1/516095/100/0/threadedhttps://nvd.nist.govhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110201-webex
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook