CVE:CVE-2010-3043
CNNVD:CNNVD-201102-030
Cisco WebEx Recording Format(WRF)以及Advanced Recording Format(ARF)Players SP21 EP3之前的T27LB版本和SP22之前的T27LC版本中存在多个缓冲区溢出漏洞。远程攻击者可以借助特制的(1).wrf或者(2).arf文件导致拒绝服务(应用程序崩溃)或者可能执行任意代码。
solution:Upgrade cisco webex_recording_format_player to a higher version than 26.49,27.10,27.11.0.3328,27.12,27.13,and avoid the version 26.49,27.10,27.11.0.3328,27.12,27.13; Upgrade cisco webex_advanced_recording_format_player to a higher version than 26.49,27.10,27.11.0.3328,27.12,27.13,and avoid the version 26.49,27.10,27.11.0.3328,27.12,27.13