Information disclosure in Cisco WebEx Meetings Player - CVE-2018-0288
Published: May 7, 2018
Vulnerability identifier: #VU12379
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-0288
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote unauthenticated attacker to obtain potentially sensitive information.
The weakness exists due to a design flaw. A remote attacker can utilize a specially crafted file that can bypass checks in the code and enable to read memory from outside the bounds of the mapped file.
Affected software
Cisco WebEx Meetings Player
How to mitigate CVE-2018-0288
Install update from vendor's website.