Cisco WebEx Network Recording Player CVE-2018-0104 Remote Code Execution Vulnerability

Bugtraq ID:	102382
Class:	Input Validation Error
CVE:	CVE-2018-0104
Remote:	Yes
Local:	No
Published:	Jan 03 2018 12:00AM
Updated:	Jan 03 2018 12:00AM
Credit:	Steven Seeley of Offensive Security, working with Trend Micro�??s Zero Day Initiative
Vulnerable:	Cisco WebEx Network Recording Player 0 Cisco WebEx Meetings Server 2.7 Cisco WebEx Meetings T31 Cisco WebEx Meetings T30 Cisco WebEx Business Suite 0
Not Vulnerable:	Cisco WebEx Meetings T32.9 Cisco WebEx Meetings T32 Cisco WebEx Meetings T31.20.2

Cisco WebEx Network Recording Player CVE-2018-0104 Remote Code Execution Vulnerability

Cisco WebEx Network Recording Player is prone to a remote code-execution vulnerability.

Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the application.

This issue is being tracked by Cisco Bug IDs CSCvg78853, CSCvg78856 and CSCvg78857.

Cisco WebEx Network Recording Player CVE-2018-0104 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco WebEx Network Recording Player CVE-2018-0104 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco WebEx Network Recording Player CVE-2018-0104 Remote Code Execution Vulnerability

References:

• Cisco Homepage (Cisco )
  
• cisco-sa-20180103-warfp:Cisco WebEx Advanced Recording Format Player Remote Code (cisco)