CVE-2019-1637 vulnerability in Cisco Products
Published on January 23, 2019
Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or email attachment and persuading the user to open the file with the affected software. Successful exploitation could allow the attacker to execute arbitrary code on the affected system.
Weakness Type
What is a Buffer Overflow Vulnerability?
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
CVE-2019-1637 has been classified to as a Buffer Overflow vulnerability or weakness.
Products Associated with CVE-2019-1637
stack.watch emails you whenever new vulnerabilities are published in Cisco Webex Meetings Online or Cisco Webex Meetings Server. Just hit a watch button to start following.
Affected Versions
Cisco WebEx WRF Player Version n/a is affected by CVE-2019-1637Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.