2025-01-26 03:03:52 +00:00

110 lines
3.8 KiB
JSON

{
"id": "CVE-2013-1115",
"sourceIdentifier": "psirt@cisco.com",
"published": "2013-09-06T11:15:37.133",
"lastModified": "2024-11-21T01:48:56.123",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ARF file, aka Bug IDs CSCue74118, CSCub28371, CSCud23401, and CSCud31109."
},
{
"lang": "es",
"value": "Desbordamiento de b\u00fafer en el reproductor Cisco WebEx Advanced Recording Format (ARF) T27 LD anterior a SP32 EP16, T27 L10N anterior a SP32_ORION111, y T28 anterior a T28.8, permite a atacantes remotos ejecutar c\u00f3digo a discrecci\u00f3n o provocar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) a trav\u00e9s de una archivo ARF manipulado. Aka Bug IDs CSCue74118, CSCub28371, CSCud23401 y CSCud31109."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"baseScore": 9.3,
"accessVector": "NETWORK",
"accessComplexity": "MEDIUM",
"authentication": "NONE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:webex_advanced_recording_format_player:27.11.26:*:*:*:*:*:*:*",
"matchCriteriaId": "4127BCBD-1886-4442-8BEE-D3D7EFAAA2FE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:webex_advanced_recording_format_player:27.21.10:*:*:*:*:*:*:*",
"matchCriteriaId": "5B1C2A8E-B3BC-46F3-B71B-3FA154552A04"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:webex_advanced_recording_format_player:27.25.10:*:*:*:*:*:*:*",
"matchCriteriaId": "61090C43-F4FD-46D6-A997-A9EF6709B56F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:webex_advanced_recording_format_player:27.32.1:*:*:*:*:*:*:*",
"matchCriteriaId": "1307C466-B5F1-4264-BF6B-8096C09D5E94"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:webex_advanced_recording_format_player:28.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F52924B1-6066-4AE2-943C-B4353D479641"
}
]
}
]
}
],
"references": [
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130904-webex",
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130904-webex",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}