CVE-2016-1415

CVE-2016-1415 describes a denial-of-service vulnerability in Cisco WebEx Meetings Player T29.10 when WRF file support is enabled. A remote attacker can trigger an application crash by providing a specially crafted file to an unsuspecting user. Rated with a CVSS score of 5.5 (Medium), this vulnerability has a low attack complexity and requires user interaction, but can lead to a high impact on availability. The attack vector is local, meaning the attacker needs to entice a user to open the malicious file. While not listed on the CISA KEV catalog or Hot List, an out-of-bounds memory corruption exploit for a similar version (T29.10) targeting ARF files is available on ExploitDB. There is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage for this specific CVE.