CVE-2008-3558

Cisco WebEx Meeting Manager <20.2008.2606.4919 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long argument to the NewObject method.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16604
exploitdb WORKING POC VERIFIED
by Guido Landi · htmlremotewindows
https://www.exploit-db.com/exploits/6220
metasploit WORKING POC GOOD
by Tobias Klein, Elazar Broad, Guido Landi, jduck · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/webex_ucf_newobject.rb

Scores

EPSS 0.7990
EPSS Percentile 99.1%

Details

CWE
CWE-119
Status published
Products (1)
cisco/webex_meeting_manager 20.2008.2601.4928
Published Aug 08, 2008
Tracked Since Feb 18, 2026