CVEvulnerability
CVE-2010-3269
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-02-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple stack-based buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to execute arbitrary code via a crafted (1) .wrf or (2) .arf file, related to use of a function pointer in a callback mechanism.
Affected configurations
• cisco webex recording format player 26.49
• cisco webex recording format player 27.10
• cisco webex recording format player 27.11.0.3328
• cisco webex recording format player 27.12
• cisco webex recording format player 27.13
• cisco webex advanced recording format player 26.49
• cisco webex advanced recording format player 27.10
• cisco webex advanced recording format player 27.11.0.3328
• cisco webex advanced recording format player 27.12
• cisco webex advanced recording format player 27.13
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://securitytracker.com/id?1025015 securitytracker.com
- http://tools.cisco.com/security/center/viewAlert.x?alertId=22016 Patch
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtml Patch, Vendor Advisory
- http://www.coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabilities Patch
- http://www.securityfocus.com/archive/1/516095/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/46075 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0261 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65076 exchange.xforce.ibmcloud.com
- http://securitytracker.com/id?1025015 securitytracker.com
- http://tools.cisco.com/security/center/viewAlert.x?alertId=22016 Patch
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtml Patch, Vendor Advisory
- http://www.coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabilities Patch
- http://www.securityfocus.com/archive/1/516095/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/46075 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0261 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65076 exchange.xforce.ibmcloud.com