PT-2017-12537

CVE-2017-12371

·

Published

2017-11-30

·

Updated

2019-10-09

Description by

CVSS 3.1
9.6
Critical
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player (affected versions not specified)
Description A remote code execution issue exists in Cisco WebEx Network Recording Player, related to the parsing of Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. This could be exploited by a remote attacker who provides a malicious ARF or WRF file to a user via email or URL, convincing the user to launch the file. Exploitation could cause the player to crash and, in some cases, allow arbitrary code execution on the targeted user's system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
ZDI-17-930
ZDI-17-931
ZDI-17-932
ZDI-17-937
Found an issue in the description? Have something to add? Feel free to write us 👾