cnvd - cnvd-2019-39617

CNVD-2019-39617

Vulnerability from cnvd - Published: 2019-11-08

Title

Cisco Webex Network Recording Player和Webex Player远程代码执行漏洞（CNVD-2019-39617）

Description

Cisco Webex Network Recording Player和Webex Player都是美国思科（Cisco）公司的用于播放视频会议记录的播放器。基于Windows平台的Cisco Webex Network Recording Player和Webex Player中存在远程代码执行漏洞，该漏洞源于软件对Advanced Recording Format (ARF)和Webex Recording Format (WRF)文件验证不当。攻击者可通过发送恶意的ARF或WRF文件利用该漏洞在受影响的系统上执行任意代码。

Severity

高

Patch Name

Cisco Webex Network Recording Player和Webex Player远程代码执行漏洞（CNVD-2019-39617）的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-webex-rce

Reference

https://nvd.nist.gov/vuln/detail/CVE-2018-15418

Impacted products

Name
['Cisco Webex Business Suite WBS31 sites – All Webex Network Recording Player and Webex Player <WBS31.23', 'Cisco Webex Business Suite WBS32 sites – All Webex Network Recording Player and Webex Player <WBS32.15.30', 'Cisco Webex Business Suite WBS33 sites – All Webex Network Recording Player and Webex Player <WBS33.5', 'Cisco Webex Meetings Online – All Webex Network Recording Player and Webex Player <1.3.39', 'Cisco Webex Meetings Server – All Webex Network Recording Player <3.0MR2 Patch 1']

Name

['Cisco Webex Business Suite WBS31 sites – All Webex Network Recording Player and Webex Player <WBS31.23', 'Cisco Webex Business Suite WBS32 sites – All Webex Network Recording Player and Webex Player <WBS32.15.30', 'Cisco Webex Business Suite WBS33 sites – All Webex Network Recording Player and Webex Player <WBS33.5', 'Cisco Webex Meetings Online – All Webex Network Recording Player and Webex Player <1.3.39', 'Cisco Webex Meetings Server – All Webex Network Recording Player <3.0MR2 Patch 1']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-15418"
    }
  },
  "description": "Cisco Webex Network Recording Player\u548cWebex Player\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u7528\u4e8e\u64ad\u653e\u89c6\u9891\u4f1a\u8bae\u8bb0\u5f55\u7684\u64ad\u653e\u5668\u3002\n\n\u57fa\u4e8eWindows\u5e73\u53f0\u7684Cisco Webex Network Recording Player\u548cWebex Player\u4e2d\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u8f6f\u4ef6\u5bf9Advanced Recording Format (ARF)\u548cWebex Recording Format (WRF)\u6587\u4ef6\u9a8c\u8bc1\u4e0d\u5f53\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u6076\u610f\u7684ARF\u6216WRF\u6587\u4ef6\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-webex-rce",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-39617",
  "openTime": "2019-11-08",
  "patchDescription": "Cisco Webex Network Recording Player\u548cWebex Player\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u7528\u4e8e\u64ad\u653e\u89c6\u9891\u4f1a\u8bae\u8bb0\u5f55\u7684\u64ad\u653e\u5668\u3002\r\n\r\n\u57fa\u4e8eWindows\u5e73\u53f0\u7684Cisco Webex Network Recording Player\u548cWebex Player\u4e2d\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u8f6f\u4ef6\u5bf9Advanced Recording Format (ARF)\u548cWebex Recording Format (WRF)\u6587\u4ef6\u9a8c\u8bc1\u4e0d\u5f53\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u6076\u610f\u7684ARF\u6216WRF\u6587\u4ef6\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Webex Network Recording Player\u548cWebex Player\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff08CNVD-2019-39617\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco Webex Business Suite WBS31 sites \u2013 All Webex Network Recording Player and Webex Player \u003cWBS31.23",
      "Cisco Webex Business Suite WBS32 sites \u2013 All Webex Network Recording Player and Webex Player \u003cWBS32.15.30",
      "Cisco Webex Business Suite WBS33 sites \u2013 All Webex Network Recording Player and Webex Player \u003cWBS33.5",
      "Cisco Webex Meetings Online \u2013 All Webex Network Recording Player and Webex Player \u003c1.3.39",
      "Cisco Webex Meetings Server \u2013 All Webex Network Recording Player \u003c3.0MR2 Patch 1"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2018-15418",
  "serverity": "\u9ad8",
  "submitTime": "2018-10-10",
  "title": "Cisco Webex Network Recording Player\u548cWebex Player\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff08CNVD-2019-39617\uff09"
}

CVE-2018-15418 (GCVE-0-2018-15418)

Vulnerability from cvelistv5 – Published: 2018-10-05 14:00 – Updated: 2024-11-26 14:29

Summary

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to open the file by using the affected software. A successful exploit could allow the attacker to execute arbitrary code on the affected system.

Severity ?

No CVSS data available.

CWE

CWE-20

Assigner

cisco

References

URL

Tags

	http://www.securitytracker.com/id/1041795	vdb-entryx_refsource_SECTRACK
	http://www.securityfocus.com/bid/105520	vdb-entryx_refsource_BID
	https://tools.cisco.com/security/center/content/C…	vendor-advisoryx_refsource_CISCO

Impacted products

	Vendor	Product	Version
	Cisco	Cisco WebEx WRF Player	Affected: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:54:03.328Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1041795",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041795"
          },
          {
            "name": "105520",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105520"
          },
          {
            "name": "20181003 Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-webex-rce"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-15418",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-25T18:50:52.143758Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-26T14:29:43.028Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco WebEx WRF Player",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-10-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to open the file by using the affected software. A successful exploit could allow the attacker to execute arbitrary code on the affected system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-07T09:57:02",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "1041795",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041795"
        },
        {
          "name": "105520",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105520"
        },
        {
          "name": "20181003 Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-webex-rce"
        }
      ],
      "source": {
        "advisory": "cisco-sa-20181003-webex-rce",
        "defect": [
          [
            "CSCvj83752",
            "CSCvj83767",
            "CSCvj83771",
            "CSCvj83793",
            "CSCvj83797",
            "CSCvj83803",
            "CSCvj83818",
            "CSCvj83824",
            "CSCvj83831",
            "CSCvj87929",
            "CSCvj87934",
            "CSCvj93870",
            "CSCvj93877",
            "CSCvk31089",
            "CSCvk33049",
            "CSCvk52510",
            "CSCvk52518",
            "CSCvk52521",
            "CSCvk59945",
            "CSCvk59949",
            "CSCvk59950",
            "CSCvk60158",
            "CSCvk60163",
            "CSCvm51315",
            "CSCvm51318",
            "CSCvm51361",
            "CSCvm51371",
            "CSCvm51373",
            "CSCvm51374",
            "CSCvm51382",
            "CSCvm51386",
            "CSCvm51391",
            "CSCvm51393",
            "CSCvm51396",
            "CSCvm51398",
            "CSCvm51412",
            "CSCvm51413",
            "CSCvm54531",
            "CSCvm54538"
          ]
        ],
        "discovery": "UNKNOWN"
      },
      "title": "Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2018-10-03T16:00:00-0500",
          "ID": "CVE-2018-15418",
          "STATE": "PUBLIC",
          "TITLE": "Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco WebEx WRF Player",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or an email attachment and persuading the user to open the file by using the affected software. A successful exploit could allow the attacker to execute arbitrary code on the affected system."
            }
          ]
        },
        "impact": {
          "cvss": {
            "baseScore": "7.8",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1041795",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041795"
            },
            {
              "name": "105520",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105520"
            },
            {
              "name": "20181003 Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-webex-rce"
            }
          ]
        },
        "source": {
          "advisory": "cisco-sa-20181003-webex-rce",
          "defect": [
            [
              "CSCvj83752",
              "CSCvj83767",
              "CSCvj83771",
              "CSCvj83793",
              "CSCvj83797",
              "CSCvj83803",
              "CSCvj83818",
              "CSCvj83824",
              "CSCvj83831",
              "CSCvj87929",
              "CSCvj87934",
              "CSCvj93870",
              "CSCvj93877",
              "CSCvk31089",
              "CSCvk33049",
              "CSCvk52510",
              "CSCvk52518",
              "CSCvk52521",
              "CSCvk59945",
              "CSCvk59949",
              "CSCvk59950",
              "CSCvk60158",
              "CSCvk60163",
              "CSCvm51315",
              "CSCvm51318",
              "CSCvm51361",
              "CSCvm51371",
              "CSCvm51373",
              "CSCvm51374",
              "CSCvm51382",
              "CSCvm51386",
              "CSCvm51391",
              "CSCvm51393",
              "CSCvm51396",
              "CSCvm51398",
              "CSCvm51412",
              "CSCvm51413",
              "CSCvm54531",
              "CSCvm54538"
            ]
          ],
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2018-15418",
    "datePublished": "2018-10-05T14:00:00Z",
    "dateReserved": "2018-08-17T00:00:00",
    "dateUpdated": "2024-11-26T14:29:43.028Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2019-39617

CVE-2018-15418 (GCVE-0-2018-15418)

Tags

Sightings

Nomenclature