CVE-2018-0457

CWE-3994 documents4 sources
Severity
5.5MEDIUM
EPSS
0.4%
top 38.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Cisco Webex WRF PlayerCisco Webex Meetings Online
Timeline
PublishedOct 5
Latest updateMay 13

Description

A vulnerability in the Cisco Webex Player for Webex Recording Format (WRF) files could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. An attacker could exploit this vulnerability by sending a user a link or email attachment with a malicious WRF file and persuading the user to open the file in the Cisco Webex Player. A successful exploit could cause the affected player to crash, resulting in a DoS condition. For more information about this vulnerability, s…

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-9j74-vrxp-gj59: A vulnerability in the Cisco Webex Player for Webex Recording Format (WRF) files could allow an unauthenticated, remote attacker to cause a denial of↗2022-05-13
▶
CVEList
Cisco Webex Player WRF Files Denial of Service Vulnerability↗2018-10-05
▶

📋Vendor Advisories

1
Cisco
Cisco Webex Player WRF Files Denial of Service Vulnerability↗2018-09-05
▶
CVE-2018-0457 (MEDIUM CVSS 5.5) | A vulnerability in the Cisco Webex | cvebase.io