CVE-2018-0104: Input Validation
First published: Thu Jan 04 2018(Updated: )
A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute arbitrary code on the system of a targeted user. The attacker could exploit this vulnerability by sending the user a link or email attachment with a malicious ARF file and persuading the user to follow the link or launch the file. Successful exploitation could allow the attacker to execute arbitrary code on the user's system. This vulnerability affects Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetings sites, Cisco WebEx Meetings Server, and Cisco WebEx ARF players. Cisco Bug IDs: CSCvg78853, CSCvg78856, CSCvg78857.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco WebEx Business Suite | ||
| Cisco Webex Meetings | ||
| Cisco WebEx Meetings Server | ||
| Cisco Webex Network Recording Player |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-0104?
CVE-2018-0104 is a vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files that allows a remote attacker to execute arbitrary code on the system of a targeted user.
How can a remote attacker exploit CVE-2018-0104?
A remote attacker can exploit CVE-2018-0104 by sending the user a link or email attachment with a malicious ARF file.
Which software products are affected by CVE-2018-0104?
Cisco WebEx Business Suite, Cisco Webex Meetings, Cisco WebEx Meetings Server, and Cisco Webex Network Recording Player are affected by CVE-2018-0104.
What is the severity rating of CVE-2018-0104?
CVE-2018-0104 has a severity rating of critical with a score of 9.6.
How can I fix CVE-2018-0104?
To fix CVE-2018-0104, it is recommended to update to the latest version of Cisco WebEx Network Recording Player.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco webex business suite
- canonical/cisco webex meetings
- canonical/cisco webex meetings server
- canonical/cisco webex network recording player