Buffer overflow in Cisco Webex Advanced Recording Format Player
CVE-2014-2132
Cisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service (application crash) via a crafted (1) .wrf or (2) .arf file that triggers a buffer over-read, aka Bug ID CSCuh52768.
Vulnerability class: Buffer Overflow
EPSS: 0.016 (73.2th percentile) — read the EPSS interpretation.
Affected products
- Cisco Webex_advanced_recording_format_player — versions t27ld, t28, t29
- Cisco Webex_recording_format_player — versions t27ld, t28, t29
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)