CVE-2014-2136: Buffer Overflow
Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file, aka Bug IDs CSCui72223, CSCul01163, and CSCul01166.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2136?
CVE-2014-2136 has a critical severity rating due to its potential to allow remote code execution.
How do I fix CVE-2014-2136?
To fix CVE-2014-2136, users should upgrade to the latest version of the Cisco WebEx Advanced Recording Format Player.
What products are affected by CVE-2014-2136?
CVE-2014-2136 affects Cisco WebEx Advanced Recording Format Player versions T27 LD, T28, and T29.
What type of vulnerability is CVE-2014-2136?
CVE-2014-2136 is a buffer overflow vulnerability that can lead to arbitrary code execution or denial of service.
Who is impacted by CVE-2014-2136?
Any user of the affected Cisco WebEx player versions is at risk of exploitation from this vulnerability.