CVE-2011-4004: Buffer Overflow
Published Oct 27, 2011
·Updated
Buffer overflow in the ATAS32 processing functionality in the Cisco WebEx Recording Format (WRF) player T26 before SP49 EP40 and T27 before SP28 allows remote attackers to execute arbitrary code via a crafted WRF file.
Affected Software
5 affected components
Cisco Webex Recording Format Player=27.10
Cisco Webex Recording Format Player=27.13
Cisco Webex Recording Format Player=27
Cisco Webex Recording Format Player=27.12
Cisco Webex Recording Format Player=26
Event History
Oct 27, 2011
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4004?
CVE-2011-4004 has been classified with high severity due to its potential to allow remote code execution.
2
How do I fix CVE-2011-4004?
To fix CVE-2011-4004, users should update to Cisco WebEx recording format player version 27.14 or later.
3
What types of attacks does CVE-2011-4004 enable?
CVE-2011-4004 enables attackers to execute arbitrary code through specially crafted WRF files.
4
Which versions of Cisco WebEx Player are affected by CVE-2011-4004?
Versions 26 and 27.x of the Cisco WebEx Recording Format Player prior to specific patches are affected by CVE-2011-4004.
5
Can CVE-2011-4004 be exploited remotely?
Yes, CVE-2011-4004 can be exploited remotely by sending a malicious WRF file to the victim.