Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2018-15419: Cisco Webex Player may let attackers run code

CVE-2018-15419 · published 8 years ago

Summary

The Webex Network Recording Player and Webex Player for Windows can be tricked into running harmful programs when a user opens a specially crafted recording file (ARF or WRF). If a malicious file is opened, an attacker could take control of the computer. Do not open unexpected recording files and install the latest updates from Cisco to fix the issue.

What to do

Update cisco webex_meetings_online to version 1.3.38 or later.
Update cisco webex_business_suite_32 to version 32.15.30 or later.
Update cisco webex_business_suite_33 to version 33.3 or later.

Affected software

Vendor	Product	Affected versions
cisco	webex_meetings_online	< 1.3.38 `cpe:2.3:a:cisco:webex_meetings_online::::::::`
cisco	webex_meetings_server	2.5 2.5.1.29 2.6 2.7 2.7.1 2.8 `cpe:2.3:a:cisco:webex_meetings_server:2.5:maintenance_release2_patch1::::::`
cisco	webex_business_suite_32	< 32.15.30 `cpe:2.3:a:cisco:webex_business_suite_32::::::::`
cisco	webex_business_suite_33	< 33.3 `cpe:2.3:a:cisco:webex_business_suite_33::::::::`

Original advisory text

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to open the file by using the affected software. A successful exploit could allow the attacker to execute arbitrary code on the affected system.

References

http://www.securityfocus.com/bid/105520 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1041795 Third Party Advisory VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2... Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.8 High

Exploitation

2% chance of attack within 30 days

Type

CWE-20Improper Input Validation

CWE-787Out-of-bounds Write

Timeline

Published5 Oct 2018

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2018-15419 · NVD

Track software like this

Free during beta