CVE-2010-3270: Buffer Overflow
First published: Wed Feb 02 2011(Updated: )
Stack-based buffer overflow in Cisco WebEx Meeting Center T27LB before SP21 EP3 and T27LC before SP22 allows user-assisted remote authenticated users to execute arbitrary code by providing a crafted .atp file and then disconnecting from a meeting. NOTE: since this is a site-specific issue with no expected action for consumers, it might be REJECTed.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco WebEx Meeting Center | =27.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/46078
- http://securitytracker.com/id?1025015
- http://www.vupen.com/english/advisories/2011/0260
- http://www.coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabilities
- http://tools.cisco.com/security/center/viewAlert.x?alertId=22355
- http://www.securityfocus.com/archive/1/516095/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2010-3270?
CVE-2010-3270 is rated as a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2010-3270?
The fix for CVE-2010-3270 involves upgrading Cisco WebEx Meeting Center to version SP21 EP3 or later for T27LB and to version SP22 or later for T27LC.
Who is affected by CVE-2010-3270?
Users of Cisco WebEx Meeting Center T27LB before SP21 EP3 and T27LC before SP22 are affected by CVE-2010-3270.
What is the exploit method for CVE-2010-3270?
CVE-2010-3270 can be exploited by a remote authenticated user providing a crafted .atp file and then disconnecting from a meeting.
Is CVE-2010-3270 site-specific?
Yes, CVE-2010-3270 is considered a site-specific issue as it requires user assistance for exploitation.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/status
- agent/description
- agent/first-publish-date
- agent/weakness
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- status/rejected
- vendor/cisco
- canonical/cisco webex meeting center
- version/cisco webex meeting center/27.0