CVE:CVE-2018-0264
CNNVD:CNNVD-201805-080
Cisco WebEx Business Suite（WBS31）client等都是美国思科（Cisco）公司的视频会议解决方案。WebEx ARF player是其中的一款播放器，主要用于播放ARF格式的WebEx录制文件。
多款Cisco产品中的WebEx ARF player存在输入验证漏洞。远程攻击者可通过向用户发送链接或带有恶意ARF文件的邮件附件并诱使用户打开该链接或文件利用该漏洞在系统上执行任意代码。以下产品和版本受到影响：Cisco WebEx Business Suite (WBS31) client T31.23.4之前版本；WebEx Business Suite (WBS32) client T32.12之前版本；WebEx Meetings with client T32.12之前版本；WebEx Meeting Server 3.0 Patch 1之前版本。
solution:Upgrade cisco webex_business_suite_31 to a higher version than t32.12,and avoid the version (,t32.12); Upgrade cisco webex_business_suite_32 to a higher version than t31.23.4,and avoid the version (,t31.23.4); Upgrade cisco webex_meeting_server to a higher version than 3.0,and avoid the version (,3.0); Upgrade cisco webex_meetings to a higher version than t32.12,and avoid the version (,t32.12)