CVE-2019-1925

CWE-119 — Buffer Overflow4 documents4 sources
Severity
7.8HIGH
EPSS
0.3%
top 46.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Cisco Cisco Webex WRF PlayerCisco Webex Business SuiteCisco Webex Meetings Online+1 more
Timeline
PublishedAug 7
Latest updateMay 24

Description

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit these vulnerabilities by sending a user a malicious ARF or WRF file through a link or email attachment and persuading th…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶CVEListV5cisco/cisco_webex_wrf_playerunspecified — 39.5.5
▶NVDcisco/webex_meetings_server4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-hx6x-rr67-2w4w: Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an att↗2022-05-24
▶
CVEList
Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities↗2019-08-07
▶

📋Vendor Advisories

1
Cisco
Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities↗2019-08-07
▶
CVE-2019-1925 (HIGH CVSS 7.8) | Multiple vulnerabilities in Cisco W | cvebase.io