CVE-2019-1773

CWE-119 — Buffer Overflow4 documents4 sources
Severity
7.8HIGH
EPSS
0.3%
top 49.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Cisco Cisco Webex WRF PlayerCisco Webex Business SuiteCisco Webex Business Suite Lockdown+2 more
Timeline
PublishedMay 15
Latest updateMay 24

Description

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or email attachment and persuading the user to …

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

▶CVEListV5cisco/cisco_webex_wrf_playerunspecified — 39.2.205

🔴Vulnerability Details

2
GHSA
GHSA-255m-r5v7-p5hq: A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an atta↗2022-05-24
▶
CVEList
Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities↗2019-05-15
▶

📋Vendor Advisories

1
Cisco
Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities↗2019-05-15
▶
CVE-2019-1773 (HIGH CVSS 7.8) | A vulnerability in the Cisco Webex | cvebase.io