CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: multiple vulnerabilities in cisco webex network recording player for microsoft windows and cisco webex player for microsoft windows could allow an attacker to execute arbitrary code on an affected system. the vulnerabilities exist because the affected software improperly validates advanced recording format (arf) and webex recording format (wrf) files. an attacker could exploit these vulnerabilities by sending a user a malicious arf or wrf file through a link or email attachment and persuading the user to open the file with the affected software on the local system. a successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-08-07
Last Modified Date: 2019-10-09
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Improper Restriction of Operations within the Bounds of a Memory Buffer.
user
CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: multiple vulnerabilities in cisco webex network recording player for microsoft windows and cisco webex player for microsoft windows could allow an attacker to execute arbitrary code on an affected system. the vulnerabilities exist because the affected software improperly validates advanced recording format (arf) and webex recording format (wrf) files. an attacker could exploit these vulnerabilities by sending a user a malicious arf or wrf file through a link or email attachment and persuading the user to open the file with the affected software on the local system. a successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-08-07
Last Modified Date: 2019-10-09
assistant