CVE-2014-2136
HighSummary
Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .arf file.
Risk Assessment
Attackers can exploit this vulnerability to remotely execute code, potentially leading to severe security and availability issues for the application.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and to monitor systems for suspicious activity related to .arf files.
Other vulnerabilities in Cisco Advanced Recording Format (ARF) player
See all- CVE-2014-2135High
Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .arf file.
- CVE-2014-2133High
Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .arf file that triggers improper LZW decompression.
Original NVD description (English source)
Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file, aka Bug IDs CSCui72223, CSCul01163, and CSCul01166.