CVEvulnerability
CVE-2017-12359
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-11-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-119
Description
A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (.arf) files could allow an attacker to execute arbitrary code on a system. An attacker could exploit this vulnerability by providing a user with a malicious .arf file via email or URL and convincing the user to launch the file. Exploitation of this vulnerability could allow arbitrary code execution on the system of the targeted user. This vulnerability affects Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetings sites, Cisco WebEx Meetings Server, and Cisco WebEx ARF players. Cisco Bug IDs: CSCve10729, CSCve10771, CSCve10779, CSCve11521, CSCve11543.
Affected configurations
• cisco webex meeting center t29
• cisco webex meeting center t30
• cisco webex meeting center t31
• cisco webex meeting center t32
• cisco webex meetings server 2.6.0
• cisco webex meetings server 2.7.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/102186 www.securityfocus.com
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex Vendor Advisory
- http://www.securityfocus.com/bid/102186 www.securityfocus.com
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex Vendor Advisory