Buffer overflow in Cisco Webex_business_suite
CVE-2018-0379
Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit these vulnerabilities by providing a user with a malicious .ar…
Vulnerability class: Buffer Overflow
EPSS: 0.018 (76.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Cisco Webex_business_suite — versions 31.23, 32.15, 33.0.6
- Cisco Webex_meeting_server — versions 3.0
- Cisco Webex_meetings_online — versions 1.3.35
- N/a Cisco Webex Network Recording Players Unknown — versions Cisco Webex Network Recording Players unknown
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2018-0379?
- CVE-2018-0379 is a high-severity vulnerability in Cisco Webex_business_suite, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.8/10. Published 2018-07-18.
- How severe is CVE-2018-0379?
- High severity. CVSS v3 base score is 7.8 out of 10.