CVE-2013-1118: Buffer Overflow
Published Sep 6, 2013
·Updated
Stack-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCuc27645.
Affected Software
7 affected components
Cisco Webex Recording Format Player=27.11.26
Cisco Webex Recording Format Player=27.21.10
Cisco Webex Recording Format Player=27.25.10
Cisco Webex Recording Format Player=27.32.1
Cisco Webex Recording Format Player=27.32.10
Cisco Webex Recording Format Player=28.0.0
Cisco Webex Recording Format Player=28.4
Event History
Sep 6, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1118?
CVE-2013-1118 has a medium severity rating due to its potential to allow remote code execution.
2
How do I fix CVE-2013-1118?
To fix CVE-2013-1118, upgrade to Cisco WebEx Recording Format player version SP32 EP16 or later.
3
What is the exploit mechanism for CVE-2013-1118?
CVE-2013-1118 can be exploited by remote attackers via a specially crafted WRF file.
4
Which versions of Cisco WebEx are affected by CVE-2013-1118?
CVE-2013-1118 affects Cisco WebEx Recording Format player versions before SP32 EP16, including T27 LD and T28.
5
Can CVE-2013-1118 be exploited without user interaction?
Yes, CVE-2013-1118 can be exploited without user interaction if a malicious WRF file is opened by the user.