PT-2017-12537

CVE-2017-12371

·

تاريخ النشر

2017-11-30

·

تاريخ التحديث

2019-10-09

الوصف من

CVSS 3.1
9.6
حرجة
المقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player (affected versions not specified)
Description A remote code execution issue exists in Cisco WebEx Network Recording Player, related to the parsing of Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. This could be exploited by a remote attacker who provides a malicious ARF or WRF file to a user via email or URL, convincing the user to launch the file. Exploitation could cause the player to crash and, in some cases, allow arbitrary code execution on the targeted user's system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ZDI-17-930
ZDI-17-931
ZDI-17-932
ZDI-17-937
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾