CVE-2013-1117

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-09-06 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the exception handler in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file, aka Bug ID CSCuc27639.

Affected products

Cisco Webex Recording Format Player: 27.11.26, 27.21.10, 27.25.10, 27.32.1, 27.32.10, 28.0.0 (+1)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130904-webex
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130904-webex

Get alerted when CVE-2013-1117 or the next vulnerability affects your stack