Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Cisco Webex Player can run malicious recording files

CVE-2019-1641 · published 7 years ago
Summary

The Cisco Webex Network Recording Player and Cisco Webex Player for Windows do not properly check the content of ARF and WRF recording files. If a user opens a specially crafted recording file sent by email or a link, an attacker could cause the program to run any code they choose on the user's computer. Do not open recording files from unknown sources and update the Webex software as soon as a fix is released.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco webex_meetings_online 1.3.33
1.3.39
t32.9
t33.3.5
t33.5.1
cpe:2.3:a:cisco:webex_meetings_online:1.3.33:*:*:*:*:*:*:*
cisco webex_meetings_server 3.0mr2
t31
cpe:2.3:a:cisco:webex_meetings_server:3.0mr2:p1:*:*:*:*:*:*
Original advisory text
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected s...
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or email attachment and persuading the user to open the file with the affected software. Successful exploitation could allow the attacker to execute arbitrary code on the affected system.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
1% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published23 Jan 2019
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2019-1641 · NVD
Track software like this
Free during beta