CVE-2017-12369: Buffer Overflow
A "Cisco WebEx Network Recording Player Out-of-Bounds Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCve30208, CSCve30214, CSCve30268.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12369?
CVE-2017-12369 has a medium severity rating due to the potential for remote code execution when exploited.
How do I fix CVE-2017-12369?
To fix CVE-2017-12369, users should update their Cisco WebEx Meetings Client to the latest version provided by Cisco.
What versions of Cisco WebEx are affected by CVE-2017-12369?
CVE-2017-12369 affects Cisco WebEx Meetings Client versions t29, t30, t31, and t32.
Can CVE-2017-12369 be exploited through email?
Yes, CVE-2017-12369 can be exploited by an attacker sending a malicious ARF or WRF file via email.
What types of files are involved in CVE-2017-12369?
CVE-2017-12369 involves Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files.