4.3
CVSSv2

CVE-2017-12359

Published: 30/11/2017 Updated: 16/12/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (.arf) files could allow an malicious user to execute arbitrary code on a system. An attacker could exploit this vulnerability by providing a user with a malicious .arf file via email or URL and convincing the user to launch the file. Exploitation of this vulnerability could allow arbitrary code execution on the system of the targeted user. This vulnerability affects Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetings sites, Cisco WebEx Meetings Server, and Cisco WebEx ARF players. Cisco Bug IDs: CSCve10729, CSCve10771, CSCve10779, CSCve11521, CSCve11543.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco webex meeting center t29

cisco webex meeting center t30

cisco webex meeting center t31

cisco webex meeting center t32

cisco webex meetings server 2.6.0

cisco webex meetings server 2.7.0

Vendor Advisories

A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (arf) files could allow an attacker to execute arbitrary code on a system An attacker could exploit this vulnerability by providing a user with a malicious arf file via email or URL and convincing the user to launch the file Exploitation of this vulnerabilit ...