中文描述:

Cisco Webex Meetings Suite等都是美国思科（Cisco）公司的多功能视频会议解决方案。Webex Network Recording Player是其中的一个用于播放会议记录的视频播放器。 Cisco Webex Network Recording Player（用于ARF格式）中存在安全漏洞。远程攻击者可通过向用户发送特制的链接或含有恶意文件的邮件附件并诱使用户在播放器中打开该文件利用该漏洞在受影响的系统上执行任意代码。以下产品和版本受到影响：Cisco Webex Meetings Suite (WBS32) - Webex Network Recording Player WBS32.15.10之前版本；Cisco Webex Meetings Suite (WBS33) - Webex Network Recording Player WBS33.3之前版本；Cisco Webex Meetings Online - Webex Network Recording Player 1.3.37之前版本；Cisco Webex Meetings Server - Webex Network Recording Player 3.0MR2之前版本。

英文描述:

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to open the file by using the affected software. A successful exploit could allow the attacker to execute arbitrary code on the affected system.

CWE类型:

标签:

中文解决方案:

英文解决方案:

临时解决方案: