CVE-2012-3940

CWE-119 — Buffer Overflow4 documents4 sources

Severity

9.3CRITICAL

EPSS

8.2%

top 7.80%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Webex Recording Format Player

Timeline

PublishedOct 25

Latest updateMay 17

Description

Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72958.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDcisco/webex_recording_format_player5 versions+4

Patches

Patch: tools.cisco.com ↗Patch: tools.cisco.com ↗

🔴Vulnerability Details

GHSA

GHSA-9r64-93vf-p94q: Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28↗2022-05-17

▶

CVEList

CVE-2012-3940: Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28↗2012-10-25

▶

📋Vendor Advisories

Cisco

Multiple Vulnerabilities in the Cisco WebEx Recording Format Player↗2012-10-10

▶