CVE-2017-6669

Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files. An attacker could exploit these vulnerabilities by providing a user with a malicious ARF file via email or URL and convincing the user to launch the file. Exploitation of these vulnerabilities could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. The Cisco WebEx Network Recording Player is an application that is used to play back WebEx meeting recordings that have been recorded on the computer of an online meeting attendee. The player can be automatically installed when the user accesses a recording file that is hosted on a WebEx server. The following client builds are affected by this vulnerability: Cisco WebEx Business Suite (WBS29) client builds prior to T29.13.130, Cisco WebEx Business Suite (WBS30) client builds prior to T30.17, Cisco WebEx Business Suite (WBS31) client builds prior to T31.10. Cisco Bug IDs: CSCvc47758 CSCvc51227 CSCvc51242.

CVSS v3 7.8 HIGH
CVSS v2.0 6.8 MEDIUM

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/99196	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038737	Third Party Advisory VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-wnrp	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:cisco:webex_advanced_recording_format_player:29.10:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-06-26 07:29

Updated : 2024-02-28 16:04

NVD link : CVE-2017-6669

Mitre link : CVE-2017-6669

CVE.ORG link : CVE-2017-6669

JSON object : View

Products Affected

cisco

webex_advanced_recording_format_player

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2017-6669", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2017-06-26T07:29:00.230", "references": [{"url": "http://www.securityfocus.com/bid/99196", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id/1038737", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-wnrp", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}, {"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files. An attacker could exploit these vulnerabilities by providing a user with a malicious ARF file via email or URL and convincing the user to launch the file. Exploitation of these vulnerabilities could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. The Cisco WebEx Network Recording Player is an application that is used to play back WebEx meeting recordings that have been recorded on the computer of an online meeting attendee. The player can be automatically installed when the user accesses a recording file that is hosted on a WebEx server. The following client builds are affected by this vulnerability: Cisco WebEx Business Suite (WBS29) client builds prior to T29.13.130, Cisco WebEx Business Suite (WBS30) client builds prior to T30.17, Cisco WebEx Business Suite (WBS31) client builds prior to T31.10. Cisco Bug IDs: CSCvc47758 CSCvc51227 CSCvc51242."}, {"lang": "es", "value": "Se presentan m\u00faltiples vulnerabilidades de desbordamiento de b\u00fafer en el producto WebEx Network Recording Player de Cisco para archivos Advanced Recording Format (ARF). Un atacante podr\u00eda explotar estas vulnerabilidades dotando a un usuario con un archivo ARF malicioso por medio de un correo electr\u00f3nico o URL y convenciendo al usuario para activar el archivo. La explotaci\u00f3n de estas vulnerabilidades podr\u00eda causar que un jugador afectado se bloquee y, en algunos casos, podr\u00eda permitir la ejecuci\u00f3n de c\u00f3digo arbitraria en el sistema de un usuario destino. El producto Cisco WebEx Network Recording Player es una aplicaci\u00f3n que se utiliza para reproducir las grabaciones de reuni\u00f3n de WebEx que se han grabado en el ordenador de un asistente a la reuni\u00f3n en l\u00ednea. El reproductor puede ser instalado autom\u00e1ticamente cuando el usuario accede a un archivo de grabaci\u00f3n hosted en un servidor WebEx. Las siguientes compilaciones cliente se ven afectadas por esta vulnerabilidad: Las compilaciones cliente de Cisco WebEx Business Suite (WBS29) anterior a versi\u00f3n T29.13.130, las compilaciones cliente de Cisco WebEx Business Suite (WBS30) anterior a versi\u00f3n T30.17, Cisco WebEx Business Suite (WBS31) compilaciones cliente anterior a versi\u00f3n T31.10. IDs de bug de Cisco: CSCvc47758 CSCvc51227 CSCvc51242."}], "lastModified": "2021-04-06T13:31:26.063", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:webex_advanced_recording_format_player:29.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F337FE5-A10C-40EB-B719-29A2A32BA874"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}