CVE-2010-3269

Multiple stack-based buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to execute arbitrary code via a crafted (1) .wrf or (2) .arf file, related to use of a function pointer in a callback mechanism.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://securitytracker.com/id?1025015
http://www.vupen.com/english/advisories/2011/0261	Vendor Advisory
http://www.coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabilities	Patch
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtml	Patch Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=22016	Patch
http://www.securityfocus.com/bid/46075
https://exchange.xforce.ibmcloud.com/vulnerabilities/65076
http://www.securityfocus.com/archive/1/516095/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:webex_recording_format_player:27.10:::::::*
	cpe:2.3:a:cisco:webex_recording_format_player:27.11.0.3328:::::::*
	cpe:2.3:a:cisco:webex_recording_format_player:27.13:::::::*
	cpe:2.3:a:cisco:webex_recording_format_player:26.49:::::::*
	cpe:2.3:a:cisco:webex_recording_format_player:27.12:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:cisco:webex_advanced_recording_format_player:27.13:::::::*
	cpe:2.3:a:cisco:webex_advanced_recording_format_player:26.49:::::::*
	cpe:2.3:a:cisco:webex_advanced_recording_format_player:27.12:::::::*
	cpe:2.3:a:cisco:webex_advanced_recording_format_player:27.10:::::::*
	cpe:2.3:a:cisco:webex_advanced_recording_format_player:27.11.0.3328:::::::*

Information

Published : 2011-02-02 15:00

Updated : 2018-10-10 13:01

NVD link : CVE-2010-3269

Mitre link : CVE-2010-3269

JSON object : View

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Advertisement

Products Affected

cisco

webex_recording_format_player
webex_advanced_recording_format_player

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://securitytracker.com/id?1025015", "name": "1025015", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.vupen.com/english/advisories/2011/0261", "name": "ADV-2011-0261", "tags": ["Vendor Advisory"], "refsource": "VUPEN"}, {"url": "http://www.coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabilities", "name": "http://www.coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabilities", "tags": ["Patch"], "refsource": "MISC"}, {"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtml", "name": "20110201 Multiple Cisco WebEx Player Vulnerabilities", "tags": ["Patch", "Vendor Advisory"], "refsource": "CISCO"}, {"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=22016", "name": "http://tools.cisco.com/security/center/viewAlert.x?alertId=22016", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/46075", "name": "46075", "tags": [], "refsource": "BID"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65076", "name": "cisco-webex-recording-bo(65076)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/516095/100/0/threaded", "name": "20110131 [CORE-2010-1001] Cisco WebEx .atp and .wrf Overflow Vulnerabilities", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple stack-based buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to execute arbitrary code via a crafted (1) .wrf or (2) .arf file, related to use of a function pointer in a callback mechanism."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-119"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2010-3269", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2011-02-02T23:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:cisco:webex_recording_format_player:27.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:cisco:webex_recording_format_player:27.11.0.3328:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:cisco:webex_recording_format_player:27.13:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:cisco:webex_recording_format_player:26.49:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:cisco:webex_recording_format_player:27.12:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:cisco:webex_advanced_recording_format_player:27.13:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:cisco:webex_advanced_recording_format_player:26.49:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:cisco:webex_advanced_recording_format_player:27.12:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:cisco:webex_advanced_recording_format_player:27.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:cisco:webex_advanced_recording_format_player:27.11.0.3328:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-10T20:01Z"}