HTTP: Cisco WebEx Player .WRF Stack Buffer Overflow

This signature detects attempts to exploit a known stack buffer overflow vulnerability in Cisco WebEx Player. It's due to improper handling of specially crafted .wrf files which results in a stack buffer overflow that can overwrite a function pointer to create reliable code execution. A successful attack can result in arbitrary code execution in the context of the application.

Extended Description

Cisco WebEx is prone to multiple remote buffer-overflow vulnerabilities because it fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit these issues to execute arbitrary code with the privileges of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

Cisco webex_(windows)

References

BugTraq: 46075

CVE: CVE-2010-3269

Short Name

HTTP:STC:WEBEX-WRF-BOF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Cisco WebEx Player .WRF Stack Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?