cisco-sa-20190703-jabber-dll: Cisco Jabber for Windows DLL Preloading Vulnerability
First published: Wed Jul 03 2019(Updated: )
A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The vulnerability is due to insufficient validation of the resources loaded by the application at run time. An attacker could exploit this vulnerability by crafting a malicious DLL file and placing it in a specific location on the targeted system. The malicious DLL file would execute when the Jabber application launches. A successful exploit could allow the attacker to execute arbitrary code on the target machine with the privileges of another user's account. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-jabber-dll
Credit: security researcher "wjcsharp". Hou JingYi Qihoo 360 CERT for also reporting this vulnerability
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Jabber |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20190703-jabber-dll?
The severity of cisco-sa-20190703-jabber-dll is classified as high due to the potential impact of a DLL preloading attack.
How do I fix cisco-sa-20190703-jabber-dll?
To fix cisco-sa-20190703-jabber-dll, ensure that you are running the latest version of Cisco Jabber for Windows, as updates include patches for this vulnerability.
Who is affected by cisco-sa-20190703-jabber-dll?
Any authenticated, local users of Cisco Jabber for Windows who have access to the software are potentially affected by cisco-sa-20190703-jabber-dll.
What type of attack does cisco-sa-20190703-jabber-dll involve?
cisco-sa-20190703-jabber-dll involves a DLL preloading attack, which can allow an attacker to execute malicious code.
Can cisco-sa-20190703-jabber-dll be exploited remotely?
No, cisco-sa-20190703-jabber-dll requires local access and valid credentials to exploit the vulnerability.
- agent/author
- agent/last-modified-date
- agent/type
- agent/event
- collector/cisco-advisory
- source/Cisco
- agent/title
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco jabber