CVE-2021-1526: Cisco Webex Player Memory Corruption Vulnerability
A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. This vulnerability is due to insufficient validation of values in Webex recording files that are in Webex Recording Format (WRF). An attacker could exploit this vulnerability by sending a user a malicious WRF file through a link or email attachment and persuading the user to open the file with the affected software on the local system. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Cisco Webex Player vulnerability?
The vulnerability ID for this Cisco Webex Player vulnerability is CVE-2021-1526.
What is the severity of CVE-2021-1526?
The severity of CVE-2021-1526 is high, with a CVSS score of 7.8.
Which software is affected by CVE-2021-1526?
Cisco Webex Player for Windows and MacOS versions up to 41.5 are affected by CVE-2021-1526.
What is the CWE ID for CVE-2021-1526?
CVE-2021-1526 has CWE IDs 787 and 119.
How can an attacker exploit CVE-2021-1526?
An attacker can exploit CVE-2021-1526 by executing arbitrary code on an affected system through a specially crafted Webex recording file.