PT-2011-1392
CVE-2010-3270
·
Published
2011-02-02
·
Updated
2018-10-10
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:H/Au:M/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Cisco WebEx Meeting Center T27LB before SP21 EP3
Cisco WebEx Meeting Center T27LC before SP22
Description
The issue is a stack-based buffer overflow that allows user-assisted remote authenticated users to execute arbitrary code. This can be achieved by providing a crafted .atp file and then disconnecting from a meeting.
Recommendations
For Cisco WebEx Meeting Center T27LB, update to SP21 EP3 or later.
For Cisco WebEx Meeting Center T27LC, update to SP22 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾