CVE-2012-3941

CWE-119 — Buffer Overflow5 documents5 sources
Severity
9.3CRITICAL
EPSS
7.7%
top 8.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Webex Recording Format Player
Timeline
PublishedOct 25
Latest updateMay 17

Description

Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72850.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: tools.cisco.com ↗Patch: tools.cisco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-pvxr-2ff8-gp87: Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28↗2022-05-17
▶
CVEList
CVE-2012-3941: Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28↗2012-10-25
▶

📋Vendor Advisories

1
Cisco
Multiple Vulnerabilities in the Cisco WebEx Recording Format Player↗2012-10-10
▶

💬Community

1
Bugzilla
CVE-2009-3941 mpop NULL character certificate flaw [F12]↗2009-11-16
▶
CVE-2012-3941 (CRITICAL CVSS 9.3) | Heap-based buffer overflow in the C | cvebase.io