CVE:CVE-2018-15414
CNNVD:CNNVD-201809-992
Cisco Webex Meetings Suite等都是美国思科（Cisco）公司的多功能视频会议解决方案。Webex Network Recording Player是其中的一个用于播放会议记录的视频播放器。
Cisco Webex Network Recording Player（用于ARF格式）中存在安全漏洞。远程攻击者可通过向用户发送特制的链接或含有恶意文件的邮件附件并诱使用户在播放器中打开该文件利用该漏洞在受影响的系统上执行任意代码。以下产品和版本受到影响：Cisco Webex Meetings Suite (WBS32) - Webex Network Recording Player WBS32.15.10之前版本；Cisco Webex Meetings Suite (WBS33) - Webex Network Recording Player WBS33.3之前版本；Cisco Webex Meetings Online - Webex Network Recording Player 1.3.37之前版本；Cisco Webex Meetings Server - Webex Network Recording Player 3.0MR2之前版本。
solution:Upgrade cisco webex_meetings_online to a higher version than 1.3.37,and avoid the version (,1.3.37); Upgrade cisco webex_meetings_server to a higher version than 2.5:maintenance_release2_patch1,2.5:maintenance_release5_patch1,2.5:maintenance_release6_patch2,2.5:maintenance_release6_patch3,2.5:maintenance_release6_patch4,2.5.1.29,2.6,2.6:maintenance_release1_patch1,2.6:maintenance_release2_patch1,2.6:maintenance_release3_patch1,2.6:maintenance_release3_patch2,2.7,2.7:base,2.7:maintenance_release1_patch1,2.7:maintenance_release2_patch1,2.7.1,2.8,2.8:base,and avoid the version 2.5:maintenance_release2_patch1,2.5:maintenance_release5_patch1,2.5:maintenance_release6_patch2,2.5:maintenance_release6_patch3,2.5:maintenance_release6_patch4,2.5.1.29,2.6,2.6:maintenance_release1_patch1,2.6:maintenance_release2_patch1,2.6:maintenance_release3_patch1,2.6:maintenance_release3_patch2,2.7,2.7:base,2.7:maintenance_release1_patch1,2.7:maintenance_release2_patch1,2.7.1,2.8,2.8:base; Upgrade cisco webex_business_suite_32 to a higher version than 32.15.10,and avoid the version (,32.15.10); Upgrade cisco webex_business_suite_33 to a higher version than 33.3,and avoid the version (,33.3)