CVE-2010-3269

Name of the Vulnerable Software and Affected Versions Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LC before SP22

Description The issue is related to multiple stack-based buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players. This allows remote attackers to execute arbitrary code via a crafted (1) .wrf or (2) .arf file. The problem is connected to the use of a function pointer in a callback mechanism.

Recommendations For Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3, update to SP21 EP3 or later. For Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LC before SP22, update to SP22 or later.