First published: Wed Feb 02 2011(Updated: )
Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .wrf or (2) .arf file, related to atas32.dll, a different vulnerability than CVE-2010-3041, CVE-2010-3042, and CVE-2010-3043.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco WebEx Advanced Recording Format Player | =27.10 | |
Cisco WebEx Advanced Recording Format Player | =26.49 | |
Cisco WebEx Advanced Recording Format Player | =27.13 | |
Cisco WebEx Advanced Recording Format Player | =27.12 | |
Cisco WebEx Advanced Recording Format Player | =27.11.0.3328 | |
Cisco WebEx WRF Player | =27.11.0.3328 | |
Cisco WebEx WRF Player | =26.49 | |
Cisco WebEx WRF Player | =27.12 | |
Cisco WebEx WRF Player | =27.10 | |
Cisco WebEx WRF Player | =27.13 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-3044 has a moderate severity level as it can lead to denial of service and potentially allow remote code execution.
To fix CVE-2010-3044, users should upgrade to Cisco WebEx Recording Format Player version 27.11.0.3328 or later.
CVE-2010-3044 can facilitate denial of service attacks and arbitrary code execution through specially crafted WRF or ARF files.
CVE-2010-3044 affects multiple versions of Cisco WebEx Recording Format Player, specifically versions prior to SP21 EP3 and SP22.
Yes, CVE-2010-3044 is exploitable remotely through crafted .wrf or .arf files sent to the vulnerable player.