CVE-2021-1527

Name of the Vulnerable Software and Affected Versions Cisco Webex Player for Windows and MacOS (affected versions not specified)

Description A vulnerability in Cisco Webex Player could allow an attacker to cause the software to terminate or gain access to memory state information related to the application. This is due to insufficient validation of values in Webex recording files stored in Webex Recording Format (WRF). An attacker could exploit this by sending a malicious WRF file to a user and persuading them to open it with the affected software, potentially crashing the software and allowing access to memory state information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.