I'm an IT administrator, and I'm grumpy that joining a WebEx meeting with Internet Explorer downloads an insecure version of their recording format player, which I then have to remove after-the-fact with my administrative permissions. It would be easier to just block WebEx, of course, but I don't want to interrupt the flow of work.
More details below, from Secunia.
Description:
Multiple vulnerabilities have been reported in WebEx Recording Format Player, which can be exploited by malicious people to compromise a user's system.
1) An indexing error when storing certain data during the processing of WRF files can be exploited to corrupt memory.
2) An error when handling the length value of a Define Huffman Table (DHT) JPEG marker within a WRF file can be exploited to cause a stack-based buffer overflow.
3) An error when processing certain records within WRF files can be exploited to cause a heap-based buffer overflow.
4) A boundary error when processing WRF files can be exploited to cause a heap-based buffer overflow via a specially crafted Audio size value.
Successful exploitation of the vulnerabilities may allow execution of arbitrary code.
The vulnerabilities are reported in the following versions:
* Client builds 28.0.0 (T28 L10N).
* Client builds 27.32.1 (T27 LD SP32 CP1) and prior.
* Client builds 27.25.10 (T27 LC SP25 EP10) and prior.
* Client builds 27.21.10 (T27 LB SP21 EP10) and prior.
* Client builds 27.11.26 (T27 L SP11 EP26) and prior.
Solution:
Update to a fixed client build (please see the vendor's advisory for details).
Provided and/or discovered by:
1, 2, 4) Damian Put via iDefense.
3) An anonymous person via iDefense.
The vendor also credits Microsoft Vulnerability Research (MSVR).
Changelog:
2012-07-18: Updated vulnerabilities #1 through #4. Updated credits and added links.
Original Advisory:
Cisco:
http://tools.cisco.com/security/...dvisory/cisco-sa-20120627-webex
Techdirt has not posted any stories submitted by shipsass.
WebEx has issues
I'm an IT administrator, and I'm grumpy that joining a WebEx meeting with Internet Explorer downloads an insecure version of their recording format player, which I then have to remove after-the-fact with my administrative permissions. It would be easier to just block WebEx, of course, but I don't want to interrupt the flow of work.
More details below, from Secunia.
Description:
Multiple vulnerabilities have been reported in WebEx Recording Format Player, which can be exploited by malicious people to compromise a user's system.
1) An indexing error when storing certain data during the processing of WRF files can be exploited to corrupt memory.
2) An error when handling the length value of a Define Huffman Table (DHT) JPEG marker within a WRF file can be exploited to cause a stack-based buffer overflow.
3) An error when processing certain records within WRF files can be exploited to cause a heap-based buffer overflow.
4) A boundary error when processing WRF files can be exploited to cause a heap-based buffer overflow via a specially crafted Audio size value.
Successful exploitation of the vulnerabilities may allow execution of arbitrary code.
The vulnerabilities are reported in the following versions:
* Client builds 28.0.0 (T28 L10N).
* Client builds 27.32.1 (T27 LD SP32 CP1) and prior.
* Client builds 27.25.10 (T27 LC SP25 EP10) and prior.
* Client builds 27.21.10 (T27 LB SP21 EP10) and prior.
* Client builds 27.11.26 (T27 L SP11 EP26) and prior.
Solution:
Update to a fixed client build (please see the vendor's advisory for details).
Provided and/or discovered by:
1, 2, 4) Damian Put via iDefense.
3) An anonymous person via iDefense.
The vendor also credits Microsoft Vulnerability Research (MSVR).
Changelog:
2012-07-18: Updated vulnerabilities #1 through #4. Updated credits and added links.
Original Advisory:
Cisco:
http://tools.cisco.com/security/...dvisory/cisco-sa-20120627-webex