CVE-2012-3939: Buffer Overflow

Published Oct 25, 2012

Updated

Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file, aka Bug ID CSCua61331.

Affected Software

5 affected components

Cisco Webex Recording Format Player=27.11.26

Cisco Webex Recording Format Player=27.21.10

Cisco Webex Recording Format Player=27.25.10

Cisco Webex Recording Format Player=27.32.1

Cisco Webex Recording Format Player=28.0.0

Remediation

Patch Available

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-webex

Event History

Oct 25, 2012

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3939?

CVE-2012-3939 has a high severity rating due to its potential for remote code execution.

How do I fix CVE-2012-3939?

To fix CVE-2012-3939, upgrade to the latest version of the Cisco WebEx Recording Format player.

What types of attacks can CVE-2012-3939 enable?

CVE-2012-3939 can enable remote attackers to execute arbitrary code or cause a denial of service due to memory corruption.

Which versions of the Cisco WebEx Recording Format player are affected by CVE-2012-3939?

CVE-2012-3939 affects versions T27 before LD SP32 EP10 and T28 before T28.4 of the Cisco WebEx Recording Format player.

What evidence indicates exploitation of CVE-2012-3939?

Successful exploitation of CVE-2012-3939 can be indicated by abnormal application behavior or system instability when a crafted WRF file is opened.