CVE-2019-1639

Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities

State
Published
Severity
7.8 High
Published
Jan 23, 2019
Updated
Nov 20, 2024
Reserved
Dec 6, 2018

Read the record on cve.org

Description

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or email attachment and persuading the user to open the file with the affected software. Successful exploitation could allow the attacker to execute arbitrary code on the affected system.

Scores

CVSSScoreVectorSource
3.07.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hcisco

Weaknesses

Affected Products

ProductVersions
Cisco WebEx WRF PlayerCisco
  • n/aAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.