VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 28, 2016· Updated Jun 17, 2026

CVE-2016-4349

CVE-2016-4349

Description

Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012 allows local users to gain privileges via a Trojan horse cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll, riched20.dll, rpcrtremote.dll, secur32.dll, sxs.dll, or uxtheme.dll file in the current working directory, aka Bug ID CSCuy56140.

Affected products

2
  • Cisco Systems, Inc./Webex Productivity Tools2 versions
    cpe:2.3:a:cisco:webex_productivity_tools:2.40.5001.10012:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cisco:webex_productivity_tools:2.40.5001.10012:*:*:*:*:*:*:*
    • (no CPE)range: =2.40.5001.10012

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.