Cisco WebEx Network Recording Player CVE-2017-12359 Buffer Overflow Vulnerability

Bugtraq ID:	102186
Class:	Design Error
CVE:	CVE-2017-12359
Remote:	Yes
Local:	No
Published:	Nov 29 2017 12:00AM
Updated:	Dec 19 2017 10:38PM
Credit:	Kushal Arvind Shah of Fortinet�??s Fortiguard Team.
Vulnerable:	Cisco WebEx Meetings Server 2.7 Cisco WebEx Meetings Server 2.6 Cisco WebEx Meetings Server 0 Cisco WebEx Meetings T32 Cisco WebEx Meetings T31 Cisco WebEx Meetings T30 Cisco WebEx Meetings T29 Cisco WebEx ARF Players 0
Not Vulnerable:

Cisco WebEx Network Recording Player CVE-2017-12359 Buffer Overflow Vulnerability

Cisco WebEx Network Recording Player is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

Attackers can exploit this issue to crash the Network Recording Player, resulting in a denial-of-service condition. Due to the nature of this issue, code execution may be possible but this has not been confirmed.

This issue being tracked by Cisco Bug IDs CSCve10729 ,CSCve10771 ,CSCve10779 ,CSCve11521 and CSCve11543.

Cisco WebEx Network Recording Player CVE-2017-12359 Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco WebEx Network Recording Player CVE-2017-12359 Buffer Overflow Vulnerability

References:

• Cisco Homepage (Cisco)
  
• cisco-sa-20171129-webex: Cisco WebEx Network Recording Player Buffer Overflow Vu (Cisco)