Published: 08/05/2014 Updated: 08/05/2014

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio channel in a .wrf file, aka Bug ID CSCuc39458.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco webex advanced recording format player t29
cisco webex recording format player t27ld
cisco webex advanced recording format player t27ld
cisco webex advanced recording format player t28
cisco webex recording format player t28
cisco webex recording format player t29

Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players Exploitation of these vulnerabilities could allow a remote attacker to cause an affected player to crash and, in some cases, could allow a remote attacker to execute arbitrary code on the system of a targeted user ...

CWE-119 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140507-webex https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140507-webex

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-2134

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect