Buffer overflow in Cisco Webex Recording Format Player

CVE-2013-1118

Stack-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCuc27645.

Vulnerability class: Buffer Overflow

EPSS: 0.032 (86.8th percentile) — read the EPSS interpretation.

Affected products

Cisco Webex_recording_format_player — versions 27.11.26, 27.21.10, 27.25.10
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)