CVE-2021-1526

CWE-119 — Buffer OverflowCWE-787 — Out-of-bounds Write4 documents4 sources
Severity
7.8HIGH
EPSS
0.5%
top 36.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Webex PlayerCisco Cisco Webex Meetings
Timeline
PublishedJun 4
Latest updateMay 24

Description

A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. This vulnerability is due to insufficient validation of values in Webex recording files that are in Webex Recording Format (WRF). An attacker could exploit this vulnerability by sending a user a malicious WRF file through a link or email attachment and persuading the user to open the file with the affected software on the local system. A successful exploit could al…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDcisco/webex_player< 41.5

🔴Vulnerability Details

2
GHSA
GHSA-773x-2cfp-99mc: A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system↗2022-05-24
▶
CVEList
Cisco Webex Player Memory Corruption Vulnerability↗2021-06-04
▶

📋Vendor Advisories

1
Cisco
Cisco Webex Player Memory Corruption Vulnerability↗2021-06-02
▶
CVE-2021-1526 (HIGH CVSS 7.8) | A vulnerability in Cisco Webex Play | cvebase.io