CVE-2014-3311

Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467.

CVSS v2.0 5.1 MEDIUM

5.1^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability : 4.9 / Impact : 6.4

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3311	Vendor Advisory
http://www.securityfocus.com/bid/68502
http://www.securitytracker.com/id/1030550
https://exchange.xforce.ibmcloud.com/vulnerabilities/94432

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:webex_meeting_center:-:::::::*
	cpe:2.3:a:cisco:webex_meetings_server:-:::::::*

History

No history.

Information

Published : 2014-07-10 11:06

Updated : 2024-02-28 12:20

NVD link : CVE-2014-3311

Mitre link : CVE-2014-3311

CVE.ORG link : CVE-2014-3311

JSON object : View

Products Affected

cisco

webex_meeting_center
webex_meetings_server

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2014-3311", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-07-10T11:06:27.927", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3311", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securityfocus.com/bid/68502", "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id/1030550", "source": "ykramarz@cisco.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/94432", "source": "ykramarz@cisco.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467."}, {"lang": "es", "value": "Desbordamiento de buffer basado en memoria din\u00e1mica en la funcionalidad de compartir ficheros en WebEx Meetings Client en Cisco WebEx Meetings Server y WebEx Meeting Center permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de datos manipulados, tambi\u00e9n conocido como Bug IDs CSCup62463 y CSCup58467."}], "lastModified": "2017-08-29T01:34:41.593", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:webex_meeting_center:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C046194-A216-4728-BAD9-4B675820F9F9"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings_server:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9FE5F3F6-C7AE-4384-B58D-F0506719E35C"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}