Vulnerability Details CVE-2012-3941
Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72850.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.037
EPSS Ranking 87.5%
CVSS Severity
CVSS v2 Score 9.3
References
- http://osvdb.org/86140
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-webex
- http://www.securityfocus.com/bid/55866
- http://www.securitytracker.com/id?1027639
- http://osvdb.org/86140
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-webex
- http://www.securityfocus.com/bid/55866
- http://www.securitytracker.com/id?1027639
Products affected by CVE-2012-3941
-
cpe:2.3:a:cisco:webex_recording_format_player:27.11.26
-
cpe:2.3:a:cisco:webex_recording_format_player:27.21.10
-
cpe:2.3:a:cisco:webex_recording_format_player:27.25.10
-
cpe:2.3:a:cisco:webex_recording_format_player:27.32.1
-
cpe:2.3:a:cisco:webex_recording_format_player:28.0.0