Gravité: : Critique
  Identifiant(s) CVE: : CVE-2012-3939
  Date du conseil: 21 juillet 2015

  Description

Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file, aka Bug ID CSCua61331.

  Information Exposure Rating:

Apply associated Trend Micro DPI Rules.

  Solutions

  Trend Micro Deep Security DPI Rule Number: 1005227
  Trend Micro Deep Security DPI Rule Name: 1005227 - Cisco WebEx Recording Format Player atas32.dll Memory Corruption

  Affected software and version:

  • cisco webex_recording_format_player 27.11.26
  • cisco webex_recording_format_player 27.21.10
  • cisco webex_recording_format_player 27.25.10
  • cisco webex_recording_format_player 27.32.1
  • cisco webex_recording_format_player 28.0.0