CVE-2009-2878

Published: Dec 18, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T27SP10) for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted WebEx Recording Format (WRF) file, a different vulnerability than CVE-2009-2876 and CVE-2009-2879.

Affected (6)

Products: Cisco: Webex

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Cisco Webex	Version 26.00
Cisco Webex	Version 26.00
Cisco Webex	Version 26.00
Cisco Webex	Version 27.00
Cisco Webex	Version 27.00
Cisco Webex	Version 27.00

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (32)

http://fgc.fortinet.com/encyclopedia/vulnerability/fg-vd-09-013-cisco.html

Source: psirt@cisco.com

http://secunia.com/advisories/37810

Source: psirt@cisco.com

Vendor Advisory

http://securitytracker.com/id?1023360

Source: psirt@cisco.com

Patch

http://tools.cisco.com/security/center/viewAlert.x?alertId=19499

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456

Source: psirt@cisco.com

PatchVendor Advisory

http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456

Source: psirt@cisco.com

PatchVendor Advisory

http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456

Source: psirt@cisco.com

PatchVendor Advisory

http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456

Source: psirt@cisco.com

PatchVendor Advisory

http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456

Source: psirt@cisco.com

PatchVendor Advisory

http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456

Source: psirt@cisco.com

PatchVendor Advisory

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml

Source: psirt@cisco.com

PatchVendor Advisory

http://www.fortiguard.com/advisory/FGA-2009-48.html

Source: psirt@cisco.com

http://www.osvdb.org/61128

Source: psirt@cisco.com

http://www.securityfocus.com/bid/37352

Source: psirt@cisco.com

http://www.vupen.com/english/advisories/2009/3574

Source: psirt@cisco.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/54841

Source: psirt@cisco.com

http://fgc.fortinet.com/encyclopedia/vulnerability/fg-vd-09-013-cisco.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/37810

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1023360

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://tools.cisco.com/security/center/viewAlert.x?alertId=19499

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.fortiguard.com/advisory/FGA-2009-48.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/61128

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/37352

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/3574

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/54841

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.