Cisco WebEx Player Buffer Overflows and Memory Corruption Errors Let Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1027212 |
|
SecurityTracker URL: http://securitytracker.com/id/1027212
|
|
CVE Reference:
CVE-2012-3053, CVE-2012-3054, CVE-2012-3055, CVE-2012-3056, CVE-2012-3057
(Links to External Site)
|
Date: Jun 27 2012
|
Impact:
Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 27.x
|
Description:
Several vulnerabilities were reported in Cisco WebEx Player. A remote user can cause arbitrary code to be executed on the target user's system.
A remote user can create a specially crafted file that, when loaded by the target user, will trigger a buffer overflow or memory corruption error and execute arbitrary code on the target system. The code will run with the privileges of the target user.
A specially crafted ARF file can trigger code execution [CVE-2012-3053]. Cisco has assigned Cisco Bug ID CSCtz72985 to this vulnerability.
A specially crafted WRF file can trigger a heap overflow [CVE-2012-3054]. Cisco has assigned Cisco Bug ID CSCtz72977 to this vulnerability.
A specially crafted JPEG within a WRF file can trigger a stack overflow [CVE-2012-3055]. Cisco has assigned Cisco Bug ID CSCtz72953 to this vulnerability.
A specially crafted WRF file can trigger a memory corruption error [CVE-2012-3056]. Cisco has assigned Cisco Bug ID CSCtz72946 to this vulnerability.
Specially crafted audio data within a WRF file can trigger a heap overflow [CVE-2012-3057]. Cisco has assigned Cisco Bug ID CSCtz00755 to this vulnerability.
iDefense and Microsoft Vulnerability Research (MSVR) reported these vulnerabilities.
|
Impact:
A remote user can create a file that, when loaded by the target user, will execute arbitrary code on the target user's system.
|
Solution:
The vendor has issued a fix for Cisco WebEx Business Suite (WBS27):
Client builds 28.1.0 (T28 L10N SP1)
Client builds 27.32.2 (T27 LD SP32 CP2)
Client builds 27.25.11 (T27 LC SP25 EP11)
The vendor's advisory is available at:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex
|
Vendor URL: tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
Linux (Any), UNIX (OS X), Windows (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Wed, 27 Jun 2012 11:38:25 -0400
Subject: [Full-disclosure] Cisco Security Advisory: Buffer Overflow Vulnerabilities in the Cisco WebEx Player
|
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Cisco Security Advisory: Buffer Overflow Vulnerabilities in the Cisco
WebEx Player
Advisory ID: cisco-sa-20120627-webex
Revision 1.0
For Public Release 2012 June 27 16:00 UTC (GMT)
+--------------------------------------------------------------------
Summary
=======
The Cisco WebEx Recording Format (WRF) player contains four buffer
overflow vulnerabilities and the Cisco Advanced Recording Format (ARF)
player contains one buffer overflow vulnerability. In some cases,
exploitation of the vulnerabilities could allow a remote attacker to
execute arbitrary code on the system with the privileges of a targeted
user.
The Cisco WebEx Players are applications that are used to play back
WebEx meeting recordings that have been recorded on a WebEx meeting
site or on the computer of an online meeting attendee. The players can
be automatically installed when the user accesses a recording file that
is hosted on a WebEx meeting site. The players can also be manually
installed for offline playback after downloading the application from
http://www.webex.com/play-webex-recording.html.
If the WRF or ARF players were automatically installed, they will be
automatically upgraded to the latest, nonvulnerable version when users
access a recording file that is hosted on a WebEx meeting site. If the
WRF or ARF player was manually installed, users will need to manually
install a new version of the player after downloading the latest version
from http://www.webex.com/play-webex-recording.html.
Cisco has updated affected versions of the WebEx meeting sites and WRF
and ARF players to address these vulnerabilities.
This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iF4EAREIAAYFAk/rJEUACgkQUddfH3/BbTq0xwD5AcfRxNUZIGqkAH2Ly2/F2gm1
dNWaKy1hIfBIkk4oFVwA/1nlXcK77u6J/kNERLpg04SFvNh7HSYY2A7XU6BLeCy+
=eBKD
-----END PGP SIGNATURE-----
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
|
|
