CVE-2014-2133: Buffer Overflow
Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file that triggers improper LZW decompression, aka Bug ID CSCuj87565.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2133?
CVE-2014-2133 has a high severity rating due to its potential for remote code execution and denial of service.
How do I fix CVE-2014-2133?
To mitigate CVE-2014-2133, users should upgrade to the latest version of the Cisco WebEx Advanced Recording Format Player as specified in Cisco's advisory.
What systems are affected by CVE-2014-2133?
CVE-2014-2133 affects Cisco WebEx Advanced Recording Format Player versions T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2.
What is the attack vector for CVE-2014-2133?
CVE-2014-2133 can be exploited by remote attackers using a specially crafted .arf file to trigger a buffer overflow.
What are the potential impacts of CVE-2014-2133?
Exploitation of CVE-2014-2133 can lead to arbitrary code execution or cause a denial of service through application crash.