Cisco Webex Player Memory Corruption Vulnerability

Vulnerability

A memory corruption vulnerability exists in Cisco Webex Player for Windows and MacOS in releases earlier than 41.5 [1]. The flaw is due to insufficient validation of values within Webex Recording Format (WRF) files [1]. An attacker can exploit this by crafting a malicious WRF file and convincing a user to open it with the vulnerable player software [1].

Exploitation

Exploitation requires the attacker to send a malicious WRF file to a user, either as a link or email attachment, and then persuade the user to open it with the affected Cisco Webex Player [1]. No special network position or authentication is needed beyond this social engineering vector [1].

Impact

Successful exploitation allows the attacker to cause the affected software to terminate (DoS) and to gain access to memory state information related to the vulnerable application [1]. This can lead to information disclosure of sensitive data residing in the process memory [1].

Mitigation

Cisco has released software updates to address this vulnerability. Cisco Webex Player releases 41.5 and later contain the fix [1]. There are no workarounds that address this vulnerability [1].