Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities

Vulnerability

Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows improperly validate Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. This flaw exists in multiple versions of the software prior to the fixed releases. An attacker can craft a malicious ARF or WRF file that, when opened with the affected player, triggers arbitrary code execution [1].

Exploitation

An attacker can deliver a malicious ARF or WRF file via a link or email attachment. The attacker must persuade the user to open the file with the vulnerable player on a local Windows system. No additional authentication or network access is required beyond the user's action.

Impact

Successful exploitation allows the attacker to execute arbitrary code on the affected system with the privileges of the targeted user. This can lead to full compromise of the user's session and potentially the system, depending on user rights.

Mitigation

Cisco has released free software updates to address these vulnerabilities. The fixed releases are available from the Cisco Security Advisories and Alerts page. Users should update their Cisco Webex Network Recording Player and Cisco Webex Player to the latest versions. No workarounds are mentioned [1].