CVE-2017-12368
CriticalSummary
A vulnerability in Cisco WebEx Network Recording Player allows for remote code execution related to ARF and WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file, potentially causing the player to crash or allowing arbitrary code execution on the user's system.
Risk Assessment
This vulnerability poses a risk to organizations as it may lead to system crashes and allow attackers to execute arbitrary code remotely, potentially resulting in data loss or system takeover.
Recommendation
It is recommended to update Cisco WebEx Network Recording Player to the latest version to mitigate this vulnerability and to educate users about not opening suspicious ARF and WRF files.
Original NVD description (English source)
A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCve10584, CSCve10591, CSCve11503, CSCve10658, CSCve11507, CSCve10749, CSCve10744, CSCve11532, CSCve10762, CSCve10764, CSCve11538.