Vulnerability CVE-2010-3270
Published: 2011-02-02   Modified: 2012-02-13

Description:
Stack-based buffer overflow in Cisco WebEx Meeting Center T27LB before SP21 EP3 and T27LC before SP22 allows user-assisted remote authenticated users to execute arbitrary code by providing a crafted .atp file and then disconnecting from a meeting. NOTE: since this is a site-specific issue with no expected action for consumers, it might be REJECTed.

See advisories in our WLB2 database:
Topic
Author
Date
High
Cisco WebEx .atp and .wrf Overflow Vulnerabilities
CORE Security Te...
03.02.2011

Type:

CWE-119

 (Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:H/Au:M/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.8/10
10/10
3.2/10
Exploit range
Attack complexity
Authentication
Remote
High
Multiple time
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Cisco -> Webex meeting center 

 References:
http://securitytracker.com/id?1025015
http://tools.cisco.com/security/center/viewAlert.x?alertId=22355
http://www.coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabilities
http://www.securityfocus.com/archive/1/516095/100/0/threaded
http://www.securityfocus.com/bid/46078
http://www.vupen.com/english/advisories/2011/0260
Copyright 2024, cxsecurity.com

 

Back to Top