CVE:CVE-2017-3823
CNNVD:CNNVD-201702-072
Cisco WebEx是美国思科（Cisco）公司的一套Web会议工具，该工具可协助异地办公人员进行协调合作。WebEx服务包括Web会议、网真视频会议和企业即时消息(IM)等。
Cisco WebEx extensions和plugins存在安全漏洞。远程攻击者可通过诱使用户打开恶意的网页或链接利用该漏洞执行任意代码。以下产品和版本受到影响：基于Google Chrome平台的Cisco WebEx Extension 1.0.7之前的版本；基于Mozilla Firefox平台的ActiveTouch General Plugin Container 106之前的版本；基于Internet Explorer平台的GpcContainer Class ActiveX control plugin 10031.6.2017.0126之前的版本；基于Internet Explorer平台的Download Manager ActiveX control plugin 2.1.0.10之前的版本。
solution:Upgrade cisco activetouch_general_plugin_container to a higher version than 105,and avoid the version 105; Upgrade cisco download_manager to a higher version than 2.1.0.9,and avoid the version 2.1.0.9; Upgrade cisco gpccontainer_class to a higher version than 10031.6.2017.0125,and avoid the version (,10031.6.2017.0125]; Upgrade cisco webex to a higher version than 1.0.6,and avoid the version (,1.0.6]; Upgrade cisco webex_meetings_server to a higher version than 2.0_base,2.0_mr2,2.0_mr3,2.0_mr4,2.0_mr5,2.0_mr6,2.0_mr7,2.0_mr8,2.0_mr8:p1,2.0_mr9,2.0_mr9:p1,2.0_mr9:p2,2.0_mr9:p3,2.5_base,2.5_mr1,2.5_mr2,2.5_mr2:p1,2.5_mr3,2.5_mr4,2.5_mr5,2.5_mr5:p1,2.5_mr6,2.5_mr6:p1,2.5_mr6:p2,2.5_mr6:p3,2.6_base,2.6_mr1,2.6_mr1:p1,2.6_mr2,2.6_mr2:p1,2.6_mr3,2.6_mr3:p1,2.7_base,2.7_mr1,2.7_mr1:p1,2.7_mr2,and avoid the version 2.0_base,2.0_mr2,2.0_mr3,2.0_mr4,2.0_mr5,2.0_mr6,2.0_mr7,2.0_mr8,2.0_mr8:p1,2.0_mr9,2.0_mr9:p1,2.0_mr9:p2,2.0_mr9:p3,2.5_base,2.5_mr1,2.5_mr2,2.5_mr2:p1,2.5_mr3,2.5_mr4,2.5_mr5,2.5_mr5:p1,2.5_mr6,2.5_mr6:p1,2.5_mr6:p2,2.5_mr6:p3,2.6_base,2.6_mr1,2.6_mr1:p1,2.6_mr2,2.6_mr2:p1,2.6_mr3,2.6_mr3:p1,2.7_base,2.7_mr1,2.7_mr1:p1,2.7_mr2; Upgrade cisco webex_meeting_center to a higher version than 2.6_base,2.6_mr1,2.6_mr1:p1,2.6_mr2,2.6_mr2:p1,2.6_mr3,2.6_mr3:p1,2.7_base,2.7_mr1,2.7_mr1:p1,2.7_mr2,t29_base,t30_base,t31_base,and avoid the version 2.6_base,2.6_mr1,2.6_mr1:p1,2.6_mr2,2.6_mr2:p1,2.6_mr3,2.6_mr3:p1,2.7_base,2.7_mr1,2.7_mr1:p1,2.7_mr2,t29_base,t30_base,t31_base