CVE-2014-2132

high Cisco
CVSS v3 Base Score
7.8
AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS Score
0.7%
Exploitation probability in 30 days
Top 29% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
None
Integrity
None
Availability
C
Published: May 8, 2014 (4389 days ago)
Last Modified: May 6, 2026
Vendor: Cisco
Source: NVD

Description

Cisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service (application crash) via a crafted (1) .wrf or (2) .arf file that triggers a buffer over-read, aka Bug ID CSCuh52768.

CWE

CWE-119

Affected Products

cisco webex advanced recording format playercisco webex recording format player

References

🔗 tools.cisco.com 🔗 tools.cisco.com