What’s Vulnerable › Vulnerabilities

CVE-2017-12367

• Severity: critical (CVSS 9.6 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-30 · updated 2026-06-17
• Weakness: CWE-119

Description

A "Cisco WebEx Network Recording Player Denial of Service Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCve11545, CSCve02843, CSCve11548.

Affected products

• Cisco WebEx Meetings Server: t29, t30, t31.11.2

References

• http://www.securityfocus.com/bid/102017
• http://www.securitytracker.com/id/1039895
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players
• http://www.securityfocus.com/bid/102017
• http://www.securitytracker.com/id/1039895
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-players

Get alerted when CVE-2017-12367 or the next vulnerability affects your stack