CVE-2011-4004 Buffer overflow in the ATAS32 processing functionality in the Cisco WebEx Recording Format (WRF) player T26 before SP49 EP40 and T27 before SP28 allows remote attackers to execute arbitrary code via a...

HighCVSS 9.3 EPSS 3.8%

Published: 2011-10-28 00:00
Updated: 2026-06-17 02:34
Exploit status: No public exploit known

Description

Buffer overflow in the ATAS32 processing functionality in the Cisco WebEx Recording Format (WRF) player T26 before SP49 EP40 and T27 before SP28 allows remote attackers to execute arbitrary code via a crafted WRF file.

Affected products

Product	Affected versions	Fixed in
cisco webex recording format player	= 26	No fix listed
cisco webex recording format player	= 27	No fix listed
cisco webex recording format player	= 27.10	No fix listed
cisco webex recording format player	= 27.12	No fix listed
cisco webex recording format player	= 27.13	No fix listed

References

20111026 Buffer Overflow Vulnerabilities in the Cisco WebEx Player vendor-advisory

CVSS v2.0

9.3 High

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.81% (percentile 90.2)
CWE: CWE-119

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.