Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities

Vulnerability

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows allow an attacker to execute arbitrary code on an affected system. The vulnerabilities are due to insufficient validation of certain elements within a Webex recording stored in either the Advanced Recording Format (ARF) or the Webex Recording Format (WRF). Affected products include Cisco Webex Player and Cisco Webex Network Recording Player releases prior to the fixed versions described in the vendor advisory [1].

Exploitation

An attacker can exploit these vulnerabilities by delivering a malicious ARF or WRF file to a target user via a link or email attachment and persuading the user to open the file with the affected software on the local system. No additional privileges or network position are required beyond user interaction; the attacker only needs to convince the user to open the crafted recording file [1].

Impact

Successful exploitation allows the attacker to execute arbitrary code on the target system with the privileges of the targeted user. This can lead to full compromise of the user's session, including potential installation of programs, viewing, changing, or deleting data, or creating new accounts with full user rights [1].

Mitigation

Cisco has released free software updates to address these vulnerabilities. Customers should upgrade to the fixed versions specified in the Cisco Security Advisory [1]. No workarounds are documented in the provided references; the recommended mitigation is to apply the vendor-supplied patch.