CVE-2019-15284

CWE-119Buffer Overflow4 documents4 sources
Severity
7.8HIGH
EPSS
0.5%
top 35.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedNov 26
Latest updateMay 24

Description

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex recording stored in either the Advanced Recording Format (ARF) or the Webex Recording Format (WRF). An attacker could exploit these vulnerabilities by sending a user a malicious ARF or WRF file through a l

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

CVEListV5cisco/cisco_webex_wrf_playerunspecifiedn/a
NVDcisco/webex_meetings_server3.0mr2, 4.0, t39.3+2

🔴Vulnerability Details

2
GHSA
GHSA-wqrj-5m22-cpfg: Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an att2022-05-24
CVEList
Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities2019-11-26

📋Vendor Advisories

1
Cisco
Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities2019-11-06
CVE-2019-15284 (HIGH CVSS 7.8) | Multiple vulnerabilities in Cisco W | cvebase.io