HTTP: Cisco WebEx Recording Format Player atas32.dll Integer Overflow

A code execution vulnerability exists in Cisco WebEx Recording Format (WRF) Player. This vulnerability is due to an integer overflow leading to a heap buffer overflow when processing WRF files. A remote unauthenticated attacker can leverage this vulnerability by crafting a WRF file and enticing the target user to view the malicious file. Successful exploitation would result in execution of arbitrary code on the target host in the context of the currently logged on user.

Extended Description

Cisco WebEx is prone to multiple remote buffer-overflow vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

Affected Products

Cisco webex_(windows)

References

BugTraq: 52882

CVE: CVE-2012-1336

Short Name

HTTP:STC:DL:WEBEX-RECORD-ATAS

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Cisco WebEx Recording Format Player atas32.dll Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?