CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2018-0104

CVSS 9.6v3.0pub. 2018-01-04upd. 2024-11-21

A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute arbitrary code on the system of a targeted user. The attacker could exploit this vulnerability by sending the user a link or email attachment with a malicious ARF file and persuading the user to follow the link or launch the file. Successful exploitation could allow the attacker to execute arbitrary code on the user's system. This vulnerability affects Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetings sites, Cisco WebEx Meetings Server, and Cisco WebEx ARF players. Cisco Bug IDs: CSCvg78853, CSCvg78856, CSCvg78857.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

  • Cisco Webex Business Suite

    APP
    Cisco
    all versions

  • Cisco Webex Meetings

    APP
    Cisco
    all versions

  • Cisco Webex Meetings Server

    APP
    Cisco
    all versions

  • Cisco Webex Network Recording Player

    APP
    Cisco
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2018-0264CRITICAL9.6PL ✓same product

RCE w Cisco WebEx Network Recording Player poprzez złośliwy plik ARF

CVE-2018-0112CRITICAL9.0PL ✓same product

RCE w klientach Cisco WebEx przez złośliwy plik Flash (.swf)

CVE-2017-12368CRITICAL9.6PL ✓same product

RCE w Cisco WebEx Network Recording Player poprzez złośliwy plik ARF/WRF

CVE-2017-12369CRITICAL9.6PL ✓same product

Cisco WebEx Network Recording Player — odczyt poza buforem i RCE

CVE-2017-12367CRITICAL9.6PL ✓same product

Cisco WebEx Network Recording Player — RCE i DoS przez złośliwy plik ARF/WRF