Cisco WebEx WRF Player CVE-2013-1118 Stack Buffer Overflow Vulnerability

Bugtraq ID:	62163
Class:	Boundary Condition Error
CVE:	CVE-2013-1118
Remote:	Yes
Local:	No
Published:	Sep 04 2013 12:00AM
Updated:	Sep 04 2013 12:00AM
Credit:	Microsoft Vulnerability Research (MSVR)
Vulnerable:	Cisco WebEx WRF Player T28 SP1 Cisco WebEx WRF Player T28 Cisco WebEx WRF Player T27 SP32 CP1 Cisco WebEx WRF Player T27 SP32 Cisco WebEx WRF Player T27 SP28 Cisco WebEx WRF Player T27 SP25 EP9 Cisco WebEx WRF Player T27 SP25 EP8 Cisco WebEx WRF Player T27 SP25 EP7 Cisco WebEx WRF Player T27 SP25 EP6 Cisco WebEx WRF Player T27 SP25 EP5 Cisco WebEx WRF Player T27 SP25 EP4 Cisco WebEx WRF Player T27 SP25 EP3 Cisco WebEx WRF Player T27 SP25 EP2 Cisco WebEx WRF Player T27 SP25 EP10 Cisco WebEx WRF Player T27 SP25 EP1 Cisco WebEx WRF Player T27 SP25 Cisco WebEx WRF Player T27 SP21 EP9 Cisco WebEx WRF Player T27 SP21 EP8 Cisco WebEx WRF Player T27 SP21 EP7 Cisco WebEx WRF Player T27 SP21 EP6 Cisco WebEx WRF Player T27 SP21 EP5 Cisco WebEx WRF Player T27 SP21 EP4 Cisco WebEx WRF Player T27 SP21 EP3 Cisco WebEx WRF Player T27 SP21 EP2 Cisco WebEx WRF Player T27 SP21 EP10 Cisco WebEx WRF Player T27 SP21 EP1 Cisco WebEx WRF Player T27 SP21 Cisco WebEx WRF Player T27 SP13 Cisco WebEx WRF Player T27 SP12 Cisco WebEx WRF Player T27 SP11 EP9 Cisco WebEx WRF Player T27 SP11 EP8 Cisco WebEx WRF Player T27 SP11 EP7 Cisco WebEx WRF Player T27 SP11 EP6 Cisco WebEx WRF Player T27 SP11 EP5 Cisco WebEx WRF Player T27 SP11 EP4 Cisco WebEx WRF Player T27 SP11 EP3 Cisco WebEx WRF Player T27 SP11 EP26 Cisco WebEx WRF Player T27 SP11 EP25 Cisco WebEx WRF Player T27 SP11 EP24 Cisco WebEx WRF Player T27 SP11 EP23 Cisco WebEx WRF Player T27 SP11 EP22 Cisco WebEx WRF Player T27 SP11 EP21 Cisco WebEx WRF Player T27 SP11 EP20 Cisco WebEx WRF Player T27 SP11 EP2 Cisco WebEx WRF Player T27 SP11 EP19 Cisco WebEx WRF Player T27 SP11 EP18 Cisco WebEx WRF Player T27 SP11 EP17 Cisco WebEx WRF Player T27 SP11 EP16 Cisco WebEx WRF Player T27 SP11 EP15 Cisco WebEx WRF Player T27 SP11 EP14 Cisco WebEx WRF Player T27 SP11 EP13 Cisco WebEx WRF Player T27 SP11 EP12 Cisco WebEx WRF Player T27 SP11 EP11 Cisco WebEx WRF Player T27 SP11 EP10 Cisco WebEx WRF Player T27 SP11 EP1 Cisco WebEx WRF Player T27 SP11 .0.3328 Cisco WebEx WRF Player T27 SP10 Cisco WebEx WRF Player T26 SP49 EP9 Cisco WebEx WRF Player T26 SP49 EP8 Cisco WebEx WRF Player T26 SP49 EP7 Cisco WebEx WRF Player T26 SP49 EP6 Cisco WebEx WRF Player T26 SP49 EP5 Cisco WebEx WRF Player T26 SP49 EP4 Cisco WebEx WRF Player T26 SP49 EP39 Cisco WebEx WRF Player T26 SP49 EP38 Cisco WebEx WRF Player T26 SP49 EP37 Cisco WebEx WRF Player T26 SP49 EP36 Cisco WebEx WRF Player T26 SP49 EP35 Cisco WebEx WRF Player T26 SP49 EP34 Cisco WebEx WRF Player T26 SP49 EP33 Cisco WebEx WRF Player T26 SP49 EP32 Cisco WebEx WRF Player T26 SP49 EP31 Cisco WebEx WRF Player T26 SP49 EP30 Cisco WebEx WRF Player T26 SP49 EP3 Cisco WebEx WRF Player T26 SP49 EP29 Cisco WebEx WRF Player T26 SP49 EP28 Cisco WebEx WRF Player T26 SP49 EP27 Cisco WebEx WRF Player T26 SP49 EP26 Cisco WebEx WRF Player T26 SP49 EP25 Cisco WebEx WRF Player T26 SP49 EP24 Cisco WebEx WRF Player T26 SP49 EP23 Cisco WebEx WRF Player T26 SP49 EP22 Cisco WebEx WRF Player T26 SP49 EP21 Cisco WebEx WRF Player T26 SP49 EP20 Cisco WebEx WRF Player T26 SP49 EP2 Cisco WebEx WRF Player T26 SP49 EP19 Cisco WebEx WRF Player T26 SP49 EP18 Cisco WebEx WRF Player T26 SP49 EP17 Cisco WebEx WRF Player T26 SP49 EP16 Cisco WebEx WRF Player T26 SP49 EP15 Cisco WebEx WRF Player T26 SP49 EP14 Cisco WebEx WRF Player T26 SP49 EP13 Cisco WebEx WRF Player T26 SP49 EP12 Cisco WebEx WRF Player T26 SP49 EP11 Cisco WebEx WRF Player T26 SP49 EP10 Cisco WebEx WRF Player T26 SP49 EP1 Cisco WebEx WRF Player T26 SP49
Not Vulnerable:

Cisco WebEx WRF Player CVE-2013-1118 Stack Buffer Overflow Vulnerability

Cisco WebEx WRF Player is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

This issue is being tracked by Cisco Bug ID CSCuc27645.

Cisco WebEx WRF Player CVE-2013-1118 Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.