CVE-2010-3270: Buffer Overflow
Stack-based buffer overflow in Cisco WebEx Meeting Center T27LB before SP21 EP3 and T27LC before SP22 allows user-assisted remote authenticated users to execute arbitrary code by providing a crafted .atp file and then disconnecting from a meeting. NOTE: since this is a site-specific issue with no expected action for consumers, it might be REJECTed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3270?
CVE-2010-3270 is rated as a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2010-3270?
The fix for CVE-2010-3270 involves upgrading Cisco WebEx Meeting Center to version SP21 EP3 or later for T27LB and to version SP22 or later for T27LC.
Who is affected by CVE-2010-3270?
Users of Cisco WebEx Meeting Center T27LB before SP21 EP3 and T27LC before SP22 are affected by CVE-2010-3270.
What is the exploit method for CVE-2010-3270?
CVE-2010-3270 can be exploited by a remote authenticated user providing a crafted .atp file and then disconnecting from a meeting.
Is CVE-2010-3270 site-specific?
Yes, CVE-2010-3270 is considered a site-specific issue as it requires user assistance for exploitation.