Cisco WebEx Network Recording Player CVE-2017-6669 Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	99196
Class:	Boundary Condition Error
CVE:	CVE-2017-6669
Remote:	Yes
Local:	No
Published:	Jun 21 2017 12:00AM
Updated:	Jun 21 2017 12:00AM
Credit:	Trend Micro
Vulnerable:	Cisco WebEx Network Recording Player 0 Cisco WebEx Meetings Player T29.10 Cisco WebEx Business Suite (WBS31) client 0 Cisco WebEx Business Suite (WBS30) client 0 Cisco WebEx Business Suite (WBS29) client 0
Not Vulnerable:	Cisco WebEx Business Suite (WBS31) client T31.10 Cisco WebEx Business Suite (WBS30) client T30.17 Cisco WebEx Business Suite (WBS29) client T29.13.130

Cisco WebEx Network Recording Player CVE-2017-6669 Multiple Buffer Overflow Vulnerabilities

Cisco WebEx Network Recording Player is prone to multiple buffer-overflow vulnerabilities because it fails to properly bounds-check user supplied input.

Successful exploits may allow an attacker to execute arbitrary code within the context of the user running the affected application or result in denial-of-service conditions.

These issues are being tracked by Cisco Bug IDs CSCvc47758, CSCvc51227 and CSCvc51242.

Cisco WebEx Network Recording Player CVE-2017-6669 Multiple Buffer Overflow Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco WebEx Network Recording Player CVE-2017-6669 Multiple Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco WebEx Network Recording Player CVE-2017-6669 Multiple Buffer Overflow Vulnerabilities

References:

• Cisco Homepage (Cisco )
  
• Cisco WebEx Network Recording Player Multiple Buffer Overflow Vulnerabilities (Cisco)