Cisco WebEx Browser Extension CVE-2017-6753 Remote Code Execution Vulnerability

Bugtraq ID:	99614
Class:	Design Error
CVE:	CVE-2017-6753
Remote:	Yes
Local:	No
Published:	Jul 17 2017 12:00AM
Updated:	Jul 17 2017 12:00AM
Credit:	Tavis Ormandy of Google Project Zero and Cris Neckar of Divergent Security.
Vulnerable:	Cisco WebEx Meetings Server T29_orion_merge Cisco WebEx Meetings Server 2.8 Cisco WebEx Meetings Server 2.7 Cisco WebEx Meetings T32 Cisco WebEx Meetings T31 Cisco WebEx Meetings T30 Cisco WebEx Meetings T29 Cisco WebEx Extension 1.0.9 Cisco WebEx Extension 1.0.5 Cisco WebEx Extension 1.0.3 Cisco WebEx Extension 1.0.2
Not Vulnerable:	Cisco WebEx Extension 1.0.12

Cisco WebEx Browser Extension CVE-2017-6753 Remote Code Execution Vulnerability

Cisco WebEx Browser Extension is prone to a remote code-execution vulnerability.

Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the application.

This issue is being tracked by Cisco Bug IDs CSCvf15012, CSCvf15020, CSCvf15030, CSCvf15033, CSCvf15036, and CSCvf15037.

The following products are affected:

Versions prior to 1.0.12 of the Cisco WebEx extension on Google Chrome.
Versions prior to 1.0.12 of the Cisco WebEx extension on Mozilla Firefox.

Cisco WebEx Browser Extension CVE-2017-6753 Remote Code Execution Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

Cisco WebEx Browser Extension CVE-2017-6753 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco WebEx Browser Extension CVE-2017-6753 Remote Code Execution Vulnerability

References:

• Cisco: WebEx Various GPC Sanitization bypasses permit Arbitrary Remote Command (chromium.org/)
  
• Cisco Homepage (Cisco )
  
• cisco-sa-20170717-webex: Cisco WebEx Browser Extension Remote Code Execution Vu (Cisco)