CVE-2014-2136

critical Cisco
CVSS v3 Base Score
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS Score
4.3%
Exploitation probability in 30 days
Top 11% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
M
Confidentiality
C
Integrity
C
Availability
C
Published: May 8, 2014 (4389 days ago)
Last Modified: May 6, 2026
Vendor: Cisco
Source: NVD

Description

Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file, aka Bug IDs CSCui72223, CSCul01163, and CSCul01166.

CWE

CWE-119

Affected Products

cisco webex advanced recording format playercisco webex recording format player

References

🔗 tools.cisco.com 🔗 tools.cisco.com