CVE-2010-3043: Buffer Overflow
First published: Wed Feb 02 2011(Updated: )
Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .wrf or (2) .arf file, a different vulnerability than CVE-2010-3041, CVE-2010-3042, and CVE-2010-3044.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Webex Player | =27.10 | |
| Cisco Webex Player | =26.49 | |
| Cisco Webex Player | =27.13 | |
| Cisco Webex Player | =27.12 | |
| Cisco Webex Player | =27.11.0.3328 | |
| Cisco WebEx WRF Player | =27.11.0.3328 | |
| Cisco WebEx WRF Player | =26.49 | |
| Cisco WebEx WRF Player | =27.12 | |
| Cisco WebEx WRF Player | =27.10 | |
| Cisco WebEx WRF Player | =27.13 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-3043?
CVE-2010-3043 has been classified as a high-severity vulnerability due to the potential for remote code execution and application crashes.
How do I fix CVE-2010-3043?
To fix CVE-2010-3043, upgrade to a patched version of the Cisco WebEx Recording Format Player that is not affected by this vulnerability.
What are the affected versions for CVE-2010-3043?
CVE-2010-3043 affects Cisco WebEx Recording Format Player versions prior to 27.11.0.3328 and versions 26.49.
What type of attack does CVE-2010-3043 enable?
CVE-2010-3043 enables attackers to execute arbitrary code or cause a denial of service through specially crafted .wrf or .arf files.
Is CVE-2010-3043 still a risk for current Cisco WebEx products?
No, if current Cisco WebEx products are updated to the latest versions that address CVE-2010-3043, they are no longer at risk.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/description
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/cisco
- canonical/cisco webex player
- version/cisco webex player/27.10
- version/cisco webex player/26.49
- version/cisco webex player/27.13
- version/cisco webex player/27.12
- version/cisco webex player/27.11.0.3328
- canonical/cisco webex wrf player
- version/cisco webex wrf player/27.11.0.3328
- version/cisco webex wrf player/26.49
- version/cisco webex wrf player/27.12
- version/cisco webex wrf player/27.10
- version/cisco webex wrf player/27.13