Memory corruption in Cisco WebEx Meetings Server and Cisco WebEx Meeting Center - CVE-2017-3823
Published: January 24, 2017 / Updated: September 14, 2018
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to boundary error when parsing specially crafted patterns, related to WebEx session in Cisco WebEx Browser Extension for Chrome. Firefox and Internet Explorer. A remote attacker can trick the victim into visiting a specially crafted website and starting WebEx session, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code on the target system with privileges of the current user.
The affected extension is shipped with two Cisco products: Cisco WebEx Meetings Server and Cisco WebEx Meetings Center.
Affected software
Cisco WebEx Meeting Center
How to mitigate CVE-2017-3823
Separate updates for browser extensions can be installed via browser update functionality.