Buffer overflow in Cisco Webex Advanced Recording Format Player
CVE-2010-3042
Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .wrf or (2) .arf file, a different vulnerability than CVE-2010-3041, CVE-2010-3043, and CVE-2010-3044.
Vulnerability class: Buffer Overflow
EPSS: 0.051 (91.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Webex_advanced_recording_format_player — versions 26.49, 27.10, 27.11.0.3328
- Cisco Webex_recording_format_player — versions 26.49, 27.10, 27.11.0.3328
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
- psirt@cisco.com (x_refsource_CONFIRM, Patch)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (vdb-entry, x_refsource_XF)