Improper input validation in Cisco WebEx Browser Extension - CVE-2017-6753
Published: July 17, 2017
Vulnerability identifier: #VU7551
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-6753
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to an unknown error. A remote attacker can create a specially crafted web page, trick the victim into opening it and execute arbitrary code on the target system with privileges of the current user.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
Affected software
Cisco WebEx Browser Extension
How to mitigate CVE-2017-6753
Update your browser extension to version 1.0.12 for Mozilla Firefox and Google Chrome.