CVE-2012-3939

CWE-119 — Buffer Overflow4 documents4 sources

Severity

9.3CRITICAL

EPSS

4.7%

top 10.68%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Webex Recording Format Player

Timeline

PublishedOct 25

Latest updateMay 17

Description

Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file, aka Bug ID CSCua61331.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDcisco/webex_recording_format_player5 versions+4

Patches

Patch: tools.cisco.com ↗Patch: tools.cisco.com ↗

🔴Vulnerability Details

GHSA

GHSA-284w-4f63-96hj: Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28↗2022-05-17

▶

CVEList

CVE-2012-3939: Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28↗2012-10-25

▶

📋Vendor Advisories

Cisco

Multiple Vulnerabilities in the Cisco WebEx Recording Format Player↗2012-10-10

▶