Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DHT index value in JPEG data within a WRF file, aka Bug ID CSCuc24503.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco WebEx WRF Player JPEG DHT Index 远程内存损坏漏洞
Vulnerability Description
Cisco WebEx Recording Format（WRF）Player是美国思科（Cisco）公司的一款播放器，它主要用于播放WRF格式的WebEx（网络会议）录制文件。 Cisco WebEx WRF Player中存在远程缓冲区溢出，该漏洞源于没有正确过滤用户提交的输入。攻击者可借助WRF文件中JPEG数据中特制的DHT索引值，利用该漏洞使得受影响播放器崩溃，导致拒绝服务（内存损坏）或可能以用户权限执行任意代码。以下版本受到影响：27.11.26，27.21.10，27.25.10，27.32
CVSS Information
N/A
Vulnerability Type
N/A