Intrusion PreventionCisco.WebEx.Player.atas32.DLL.Heap.Overflow
Description
This indicates an attack attempt against one of the heap-based buffer-overflow vulnerabilities in Cisco WebEx WRF Player.
These vulnerabilities are caused by an error when the vulnerable software handles user-supplied input. They could allow remote attacker to execute arbitrary code via opening a malicious local or online WRF file.
Affected Products
Cisco WebEx WRF Player 3.0 or earlier versions on Linux, Microsoft Windows and Mac OS X
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Use the solution provided by the vendor:
FG-VD-09-008: fixed in WebEx releases T26 and T27
FG-VD-09-010: fixed in WebEx releases T26SP49EP32 and T27SP10
FG-VD-09-012: fixed in WebEx releases T26SP49EP32 and T27SP10
FG-VD-09-013: fixed in WebEx releases T26SP49EP32 and T27SP10
FG-VD-09-014: fixed in WebEx releases T26LSp49EP32 and T27SP10
FG-VD-09-016: fixed in WebEx release T26SP49EP
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 17752 |
| Created | Oct 06, 2009 |
| Updated | Jan 13, 2022 |
| Risk |
|
| CVE ID | CVE-2009-2876 CVE-2009-2879 CVE-2009-2878 |
| Exploit Prediction Score | 2.69% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, MacOS |
| Affected App | Cisco |