First published: Wed Feb 02 2011(Updated: )
Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .wrf or (2) .arf file, a different vulnerability than CVE-2010-3041, CVE-2010-3043, and CVE-2010-3044.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Webex Player | =27.10 | |
Cisco Webex Player | =26.49 | |
Cisco Webex Player | =27.13 | |
Cisco Webex Player | =27.12 | |
Cisco Webex Player | =27.11.0.3328 | |
Cisco WebEx WRF Player | =27.11.0.3328 | |
Cisco WebEx WRF Player | =26.49 | |
Cisco WebEx WRF Player | =27.12 | |
Cisco WebEx WRF Player | =27.10 | |
Cisco WebEx WRF Player | =27.13 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-3042 is classified as a high severity vulnerability due to its potential to allow remote attackers to crash the application or execute arbitrary code.
To fix CVE-2010-3042, users should update to the latest version of Cisco WebEx Recording Format Player or Advanced Recording Format Player, as recommended in the security advisory.
CVE-2010-3042 can lead to denial of service attacks, causing the application to crash, and potentially remote code execution if exploited.
CVE-2010-3042 affects multiple versions of Cisco WebEx Recording Format Player and Advanced Recording Format Player prior to their specified service packs.
Signs of an exploit for CVE-2010-3042 may include unexpected application crashes or irregular behavior when opening crafted .wrf or .arf files.