CVE-2014-2133
HighSummary
Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .arf file that triggers improper LZW decompression.
Risk Assessment
Attackers can exploit this vulnerability to remotely execute code, potentially leading to serious security and availability issues for the system.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and to monitor systems for suspicious activity related to .arf files.
Other vulnerabilities in Cisco Advanced Recording Format (ARF) player
See all- CVE-2014-2136High
Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .arf file.
- CVE-2014-2135High
Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .arf file.
Original NVD description (English source)
Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file that triggers improper LZW decompression, aka Bug ID CSCuj87565.