CVE-2012-1337 Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execu...
HighCVSS 9.3
EPSS 23.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1335 and CVE-2012-1336.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco webex recording format player | >= 27.11.0, <= 27.11.26 | No fix listed |
| cisco webex recording format player | >= 27.21.0, <= 27.21.10 | No fix listed |
| cisco webex recording format player | >= 27.25.0, < 27.25.10 | 27.25.10 |
| cisco webex recording format player | >= 27.32.0, < 27.32.1 | 27.32.1 |
References
- 20120404 Buffer Overflow Vulnerabilities in the Cisco WebEx Player vendor-advisory
- 1026888 third-party-advisory vdb-entry
- webex-wrffile-bo(74606) vdb-entry