CVE-2010-3041 Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of....
HighCVSS 9.3
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .wrf or (2) .arf file, related to atas32.dll, a different vulnerability than CVE-2010-3042, CVE-2010-3043, and CVE-2010-3044.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco webex recording format player | = 26.49 | No fix listed |
| cisco webex recording format player | = 27.10 | No fix listed |
| cisco webex recording format player | = 27.11.0.3328 | No fix listed |
| cisco webex recording format player | = 27.12 | No fix listed |
| cisco webex recording format player | = 27.13 | No fix listed |
| cisco webex advanced recording format player | = 26.49 | No fix listed |
| cisco webex advanced recording format player | = 27.10 | No fix listed |
| cisco webex advanced recording format player | = 27.11.0.3328 | No fix listed |
| cisco webex advanced recording format player | = 27.12 | No fix listed |
| cisco webex advanced recording format player | = 27.13 | No fix listed |
References
- 1025016 vdb-entry
- tools.cisco.com
- 20110201 Multiple Cisco WebEx Player Vulnerabilities vendor-advisory
- www.fortiguard.com
- 46075 vdb-entry
- webex-arf-bo(65072) vdb-entry