CVE-2017-12360
MEDIUMCisco WebEx Network Recording Player - Denial of Service via Malicious WRF File
Title source: llmDescription
A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format (WRF) files could allow an attacker to cause a denial of service (DoS) condition. An attacker could exploit this vulnerability by providing a user with a malicious WRF file via email or URL and convincing the user to open the file. A successful exploit could cause an affected player to crash, resulting in a DoS condition. This vulnerability affects Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetings sites, and Cisco WebEx WRF players. Cisco Bug IDs: CSCve30294, CSCve30301.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex1
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/102001
Scores
CVSS v3
4.3
EPSS
0.0101
EPSS Percentile
59.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Details
CWE
CWE-399
Status
published
Products (5)
cisco/webex_meeting_center
t29
cisco/webex_meeting_center
t30
cisco/webex_meeting_center
t31
cisco/webex_meeting_center
t32
n/a/Cisco WebEx Network Recording Player
Cisco WebEx Network Recording Player
Published
Nov 30, 2017
Tracked Since
Feb 18, 2026