CVE-2017-12367CWE-119

A "Cisco WebEx Network Recording Player Denial of Service Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and…

published November 30, 2017

CVSS
—
EPSS
3%
Percentile
86.4
In the wild
Unconfirmed
What it is

⚠️ A single malicious ARF or WRF file is all it takes for an attacker to crash your Cisco WebEx Network Recording Player! Think of it like a tricky prank call — someone tricks you into opening a harmless-looking file that ends up jamming your phone and possibly letting them listen in on your conversations. That's how this vulnerability allows attackers to exploit your system! If a user falls for the trick and opens the malicious file, it could lead to a crash of the player and potentially allow arbitrary code execution. This could mean anything from losing your recordings to giving an attacker access to sensitive info on your system. Yikes!

Put simply

Think of it like a tricky prank call — someone tricks you into opening a harmless-looking file that ends up jamming your phone and possibly letting them listen in on your conversations. That's how this vulnerability allows attackers to exploit your system! This vulnerability allows remote attackers to exploit the Cisco WebEx Network Recording Player by delivering crafted ARF or WRF files, which can cause a denial of service when executed, or even allow arbitrary code execution on the user's system.

What to do

If a user falls for the trick and opens the malicious file, it could lead to a crash of the player and potentially allow arbitrary code execution. This could mean anything from losing your recordings to giving an attacker access to sensitive info on your system. Yikes! To protect yourself, avoid opening suspicious ARF or WRF files from unknown sources. Ensure you're using the latest version of Cisco WebEx Network Recording Player, and keep an eye out for security advisories from Cisco for future updates. 🛡️ You've got this! By following these steps, you can keep your system safe from this pesky vulnerability! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02829 · 86.4th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2017-11-30T09:00Z
EPSS history
Timeline
  • 30 NOV 09:00Z
    A "Cisco WebEx Network Recording Player Denial of Service Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and…
    cvelistv5