CVE-2010-3043
Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service (application crash) or possibly execute…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (5.14%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .wrf or (2) .arf file, a different vulnerability than CVE-2010-3041, CVE-2010-3042, and CVE-2010-3044.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 5.14% probability · 92th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- cisco/webex recording format player · cisco/webex advanced recording format player
- Source
- psirt@cisco.com
References
- http://securitytracker.com/id?1025016
- http://tools.cisco.com/security/center/viewAlert.x?alertId=22016
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtmlVendor Advisory
- http://www.securityfocus.com/bid/46075
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65074
- http://securitytracker.com/id?1025016
- http://tools.cisco.com/security/center/viewAlert.x?alertId=22016
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtmlVendor Advisory
- http://www.securityfocus.com/bid/46075
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65074
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.