VYPR
← All advisories
Low severity3.3NVD Advisory· Published Jun 3, 2020· Updated Jun 17, 2026

CVE-2020-3321

CVE-2020-3321

Description

A vulnerability in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows could allow an attacker to cause a process crash resulting in a Denial of service (DoS) condition for the player application on an affected system. The vulnerability exists due to insufficient validation of certain elements with a Webex recording stored in either the Advanced Recording Format (ARF) or the Webex Recording Format (WRF). An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file through a link or email attachment and persuading the user to open the file with the affected software on the local system. A successful exploit could allow the attacker to cause the Webex player application to crash when trying to view the malicious file.

Affected products

18
  • Cisco Systems, Inc./Webex Network Recording Player8 versions
    cpe:2.3:a:cisco:webex_network_recording_player:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:cisco:webex_network_recording_player:*:*:*:*:*:*:*:*range: <3.0
    • cpe:2.3:a:cisco:webex_network_recording_player:3.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_network_recording_player:3.0:maintenance_release1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_network_recording_player:3.0:maintenance_release2:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_network_recording_player:4.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_network_recording_player:4.0:maintenance_release1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_network_recording_player:4.0:maintenance_release2:*:*:*:*:*:*
    • (no CPE)
  • Cisco Systems, Inc./Webex Player8 versions
    cpe:2.3:a:cisco:webex_player:*:*:*:*:*:windows:*:*+ 7 more
    • cpe:2.3:a:cisco:webex_player:*:*:*:*:*:windows:*:*range: <3.0
    • cpe:2.3:a:cisco:webex_player:3.0:-:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:webex_player:3.0:maintenance_release1:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:webex_player:3.0:maintenance_release2:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:webex_player:4.0:-:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:webex_player:4.0:maintenance_release1:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:webex_player:4.0:maintenance_release2:*:*:*:windows:*:*
    • (no CPE)
  • Cisco Systems, Inc./Webex Recording Format Playercpe-rescue
    Range: unspecified
  • Cisco/Cisco Webex Player for Microsoft Windowsv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.