Cisco WebEx WRF and ARF File Format Multiple Remote Buffer Overflow Vulnerabilities
BID:46075
Info
Cisco WebEx WRF and ARF File Format Multiple Remote Buffer Overflow Vulnerabilities
| Bugtraq ID: | 46075 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2010-3041 CVE-2010-3042 CVE-2010-3043 CVE-2010-3044 CVE-2010-3269 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 31 2011 12:00AM |
| Updated: | Feb 01 2011 04:20PM |
| Credit: | Federico Muttis, Sebastián Tello and Manuel Muradas of Core Security Technologies, TippingPoint, and Fortinet's FortiGuard Labs. |
| Vulnerable: |
Cisco WebEx (Windows) 27.10 Cisco WebEx (Windows) 26.49.32 Cisco WebEx (Windows) 27.00 Cisco WebEx (Windows) 26.00 Cisco WebEx (Mac OS X) 27.11.8 Cisco WebEx (Mac OS X) 26.49.35 Cisco WebEx (Mac OS X) 27.00 Cisco WebEx (Mac OS X) 26.00 Cisco WebEx (Linux) 27.11.8 Cisco WebEx (Linux) 26.49.35 Cisco WebEx (Linux) 27.00 Cisco WebEx (Linux) 26.00 Cisco WebEx 0 |
| Not Vulnerable: |
Cisco WebEx (Windows) 27LC SP22 Cisco WebEx (Windows) 27LB SP21 EP3 Cisco WebEx (Mac OS X) 27LC SP22 Cisco WebEx (Mac OS X) 27LB SP21 EP3 Cisco WebEx (Linux) 27LC SP22 Cisco WebEx (Linux) 27LB SP21 EP3 |
Discussion
Cisco WebEx WRF and ARF File Format Multiple Remote Buffer Overflow Vulnerabilities
Cisco WebEx is prone to multiple remote buffer-overflow vulnerabilities because it fails to perform adequate boundary-checks on user-supplied data.
An attacker can exploit these issues to execute arbitrary code with the privileges of the affected application. Failed exploit attempts will result in a denial-of-service condition.
Cisco WebEx is prone to multiple remote buffer-overflow vulnerabilities because it fails to perform adequate boundary-checks on user-supplied data.
An attacker can exploit these issues to execute arbitrary code with the privileges of the affected application. Failed exploit attempts will result in a denial-of-service condition.
Exploit / POC
Cisco WebEx WRF and ARF File Format Multiple Remote Buffer Overflow Vulnerabilities
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Cisco WebEx WRF and ARF File Format Multiple Remote Buffer Overflow Vulnerabilities
Solution:
Vendor updates are available. Please see the referenced vendor advisory for more information.
Solution:
Vendor updates are available. Please see the referenced vendor advisory for more information.
References
Cisco WebEx WRF and ARF File Format Multiple Remote Buffer Overflow Vulnerabilities
References:
References: