
5/10/2018

26/11/2024
CVE-2018-0457: Cisco Webex Player WRF Files Denial of Service Vulnerability
First published: Fri Oct 05 2018(Updated: )
A vulnerability in the Cisco Webex Player for Webex Recording Format (WRF) files could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. An attacker could exploit this vulnerability by sending a user a link or email attachment with a malicious WRF file and persuading the user to open the file in the Cisco Webex Player. A successful exploit could cause the affected player to crash, resulting in a DoS condition. For more information about this vulnerability, see the Details section of this security advisory.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|
Cisco Webex Meetings | =t31 | |
Cisco Webex Meetings | =t32 | |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2018-0457?
CVE-2018-0457 is classified as a medium severity vulnerability.
How can CVE-2018-0457 be exploited?
CVE-2018-0457 can be exploited by sending a user a link or email attachment containing a malicious Webex Recording Format (WRF) file.
Which software versions are affected by CVE-2018-0457?
CVE-2018-0457 affects Cisco Webex Meetings versions t31 and t32.
How do I fix CVE-2018-0457?
To mitigate CVE-2018-0457, it is recommended to update Cisco Webex Meetings to the latest version.
What type of vulnerability is CVE-2018-0457?
CVE-2018-0457 is a denial of service (DoS) vulnerability related to the Cisco Webex Player.
- agent/type
- agent/softwarecombine
- agent/references
- agent/title
- agent/author
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco webex meetings
- version/cisco webex meetings/t31
- version/cisco webex meetings/t32
Contact
SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.coBy using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203