CVE-2014-2132

CWE-119 — Buffer Overflow CWE-20 — Improper Input Validation CWE-125 — Out-of-bounds Read5 documents5 sources

Severity

7.8HIGH

EPSS

0.7%

top 29.07%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Webex Advanced Recording Format Player Cisco Webex Recording Format Player

Timeline

PublishedMay 8

Latest updateMay 17

Description

Cisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service (application crash) via a crafted (1) .wrf or (2) .arf file that triggers a buffer over-read, aka Bug ID CSCuh52768.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

▶NVDcisco/webex_advanced_recording_format_playert27ld, t28, t29+2

▶NVDcisco/webex_recording_format_playert27ld, t28, t29+2

🔴Vulnerability Details

GHSA

GHSA-7854-q65j-f45f: Cisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28↗2022-05-17

▶

CVEList

CVE-2014-2132: Cisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28↗2014-05-08

▶

📋Vendor Advisories

Cisco

Multiple Vulnerabilities in the Cisco WebEx Recording Format and Advanced Recording Format Players↗2014-05-07

▶