CVE-2018-0288 (CNNVD-201805-073)
中文标题:
Cisco WebEx Business Suite meeting sites和WebEx Meetings sites WebEx Recording Format Player 信息泄露漏洞
英文标题:
A vulnerability in Cisco WebEx Recording Format (WRF) Player could allow an unauthenticated, remote ...
漏洞描述
中文描述:
Cisco WebEx Business Suite meeting sites和WebEx Meetings sites都是美国思科（Cisco）公司的视频会议解决方案。WebEx Recording Format（WRF）Player是其中的一款播放器，主要用于播放WRF格式的WebEx（网络会议）录制文件。 Cisco WebEx Business Suite meeting sites和WebEx Meetings sites中的WebEx WRF Player存在信息泄露漏洞。远程攻击者可通过使用恶意制作的文件利用该漏洞读取映射文件边界之外的内存。
英文描述:
A vulnerability in Cisco WebEx Recording Format (WRF) Player could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to a design flaw in Cisco WRF Player. An attacker could exploit this vulnerability by utilizing a maliciously crafted file that could bypass checks in the code and enable an attacker to read memory from outside the bounds of the mapped file. This vulnerability affects Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetings sites, and Cisco WebEx WRF players. Cisco Bug IDs: CSCvh89107, CSCvh89113, CSCvh89132, CSCvh89142.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| cisco | webex_meetings_online | t31.20 | - | - |
cpe:2.3:a:cisco:webex_meetings_online:t31.20:*:*:*:*:*:*:*
|
| cisco | webex_meetings_online | t31.20.2 | - | - |
cpe:2.3:a:cisco:webex_meetings_online:t31.20.2:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2018-0288 |
2025-11-11 15:19:35 | 2025-11-11 07:34:57 |
| NVD | nvd_CVE-2018-0288 |
2025-11-11 14:55:54 | 2025-11-11 07:43:33 |
| CNNVD | cnnvd_CNNVD-201805-073 |
2025-11-11 15:10:00 | 2025-11-11 07:53:42 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 信息泄露
- cnnvd_id: 未提取 -> CNNVD-201805-073
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- cvss_score: 未提取 -> 5.3
- cvss_vector: NOT_EXTRACTED -> CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- cvss_version: NOT_EXTRACTED -> 3.1
- affected_products_count: 0 -> 2
- data_sources: ['cve'] -> ['cve', 'nvd']