PT-2021-5092
CVE-2021-1526
·
تاريخ النشر
2021-06-02
·
تاريخ التحديث
2021-06-21
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Cisco Webex Player for Windows and MacOS (affected versions not specified)
Description
The issue is related to insufficient validation of values in Webex recording files that are in Webex Recording Format (WRF). An attacker could exploit this by sending a malicious WRF file to a user through a link or email attachment and persuading the user to open the file with the affected software. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾