Buffer overflow in Cisco Webex Advanced Recording Format Player
CVE-2010-3041
Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .wrf or (2) .arf file, related to atas32.dll, a different vulnerability than CVE-2010-3042, CVE-2010-3043, and CVE-2010-3044.
Vulnerability class: Buffer Overflow
EPSS: 0.055 (92.0th percentile) — read the EPSS interpretation.
Affected products
- Cisco Webex_advanced_recording_format_player — versions 26.49, 27.10, 27.11.0.3328
- Cisco Webex_recording_format_player — versions 26.49, 27.10, 27.11.0.3328
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (x_refsource_MISC)
- psirt@cisco.com (x_refsource_CONFIRM)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)