Improper input validation in Cisco WebEx Browser Extension - CVE-2017-6753
Published: July 17, 2017
Vulnerability identifier: #VU7551
CSH Severity: High
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2017-6753
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Cisco Systems, Inc
Affected software:
Cisco WebEx Browser Extension
Cisco WebEx Browser Extension
Detailed vulnerability description
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to an unknown error. A remote attacker can create a specially crafted web page, trick the victim into opening it and execute arbitrary code on the target system with privileges of the current user.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
How to mitigate CVE-2017-6753
Update your browser extension to version 1.0.12 for Mozilla Firefox and Google Chrome.