Cisco WebEx ATP File Remote Stack Buffer Overflow Vulnerability
BID:46078
Info
Cisco WebEx ATP File Remote Stack Buffer Overflow Vulnerability
| Bugtraq ID: | 46078 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2010-3270 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 31 2011 12:00AM |
| Updated: | Jan 31 2011 12:00AM |
| Credit: | Federico Muttis, Sebastián Tello and Manuel Muradas of Core Security Technologies |
| Vulnerable: |
Cisco WebEx 0 |
| Not Vulnerable: | |
Discussion
Cisco WebEx ATP File Remote Stack Buffer Overflow Vulnerability
Cisco WebEx is prone to a remote code-execution vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit this issue to execute arbitrary code with the privileges of the affected application. Failed exploit attempts will result in a denial-of-service condition.
Cisco WebEx is prone to a remote code-execution vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit this issue to execute arbitrary code with the privileges of the affected application. Failed exploit attempts will result in a denial-of-service condition.
Exploit / POC
Cisco WebEx ATP File Remote Stack Buffer Overflow Vulnerability
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Cisco WebEx ATP File Remote Stack Buffer Overflow Vulnerability
Solution:
Reports indicate the vendor has released updates to address this issue. This has not been confirmed. Please contact the vendor for more information.
Solution:
Reports indicate the vendor has released updates to address this issue. This has not been confirmed. Please contact the vendor for more information.
References
Cisco WebEx ATP File Remote Stack Buffer Overflow Vulnerability
References:
References:
- Cisco WebEx .atp and .wrf Overflow Vulnerabilities (Cisco)
- WebEx Homepage (Cisco)