CVE-2009-2877: Buffer Overflow
Stack-based buffer overflow in ataudio.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x (aka T27SP10) for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted WebEx Recording Format (WRF) file.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2877?
CVE-2009-2877 has a severity rating of medium, primarily due to its potential to cause denial of service.
How do I fix CVE-2009-2877?
To mitigate CVE-2009-2877, users should upgrade to the patched versions of Cisco WebEx which address this vulnerability.
Which versions of Cisco WebEx are affected by CVE-2009-2877?
CVE-2009-2877 affects Cisco WebEx versions 26.x before 26.49.32 and 27.x before 27.10.x for Windows, and similar versions for Mac OS X and Linux.
What type of vulnerability is CVE-2009-2877?
CVE-2009-2877 is classified as a stack-based buffer overflow vulnerability.
Can CVE-2009-2877 be exploited remotely?
Yes, CVE-2009-2877 can be exploited remotely by attackers to cause a denial of service.