Cisco WebEx Player is prone to an overflow condition. The program fails to properly sanitize user-supplied input resulting in a buffer overflow. With a specially crafted WRF file, a context-dependent attacker can potentially execute arbitrary code.
Classification
Location:
Local / Remote,
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Private
Disclosure:
Vendor Verified,
Coordinated Disclosure
Solution
Upgrade to version 27.25.10 (T27 LC SP25 EP10) or 27.32.1 (T27 LD SP32 CP1) or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
