webex_meetings Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/webex_meetings/ Sun, 26 Feb 2023 06:31:21 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png webex_meetings Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/webex_meetings/ 32 32 CVE-2019-1674 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1674/ Sun, 26 Feb 2023 06:31:21 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1674/ A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command […]

The post CVE-2019-1674 appeared first on CVE Vulnerability.

]]> A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools. This vulnerability is fixed in Cisco Webex Meetings Desktop App Release 33.6.6 and 33.9.1 releases. This vulnerability is fixed in Cisco Webex Productivity Tools Release 33.0.7.

The post CVE-2019-1674 appeared first on CVE Vulnerability.

]]> CVE-2019-16001 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-16001/ Sun, 26 Feb 2023 06:31:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-16001/ A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The vulnerability is due to insufficient validation of the resources […]

The post CVE-2019-16001 appeared first on CVE Vulnerability.

]]> A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The vulnerability is due to insufficient validation of the resources loaded by the application at run time. An attacker could exploit this vulnerability by crafting a malicious DLL file and placing it in a specific location on the targeted system. The malicious DLL file would execute when the vulnerable application is launched. A successful exploit could allow the attacker to execute arbitrary code on the target machine with the privileges of another user account.

The post CVE-2019-16001 appeared first on CVE Vulnerability.

]]> CVE-2019-15283 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-15283/ Sun, 26 Feb 2023 06:30:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-15283/ Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex recording stored in either the Advanced Recording Format (ARF) or the Webex […]

The post CVE-2019-15283 appeared first on CVE Vulnerability.

]]> Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex recording stored in either the Advanced Recording Format (ARF) or the Webex Recording Format (WRF). An attacker could exploit these vulnerabilities by sending a user a malicious ARF or WRF file through a link or email attachment and persuading the user to open the file with the affected software on the local system. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.

The post CVE-2019-15283 appeared first on CVE Vulnerability.

]]> CVE-2019-15285 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-15285/ Sun, 26 Feb 2023 06:30:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-15285/ Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex recording stored in either the Advanced Recording Format (ARF) or the Webex […]

The post CVE-2019-15285 appeared first on CVE Vulnerability.

]]> Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex recording stored in either the Advanced Recording Format (ARF) or the Webex Recording Format (WRF). An attacker could exploit these vulnerabilities by sending a user a malicious ARF or WRF file through a link or email attachment and persuading the user to open the file with the affected software on the local system. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.

The post CVE-2019-15285 appeared first on CVE Vulnerability.

]]> CVE-2019-15287 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-15287/ Sun, 26 Feb 2023 06:30:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-15287/ Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex recording stored in either the Advanced Recording Format (ARF) or the Webex […]

The post CVE-2019-15287 appeared first on CVE Vulnerability.

]]> Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex recording stored in either the Advanced Recording Format (ARF) or the Webex Recording Format (WRF). An attacker could exploit these vulnerabilities by sending a user a malicious ARF or WRF file through a link or email attachment and persuading the user to open the file with the affected software on the local system. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.

The post CVE-2019-15287 appeared first on CVE Vulnerability.

]]>