CVE-2017-12367 is a critical denial-of-service vulnerability affecting Cisco WebEx Network Recording Player when processing malicious Advanced Recording Format (ARF) or WebEx Recording Format (WRF) files. With a CVSS score of 9.6, this vulnerability allows a remote attacker to crash the player and potentially achieve arbitrary code execution through user interaction. While no public exploit code is available and it's not listed in CISA's KEV catalog, it has garnered significant community discussion and media coverage, indicating awareness of its high severity.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
t29CPE matchmatch criteria | cpe:2.3:a:cisco:webex_meetings_server:t29:*:*:*:*:*:*:* | ||
t30CPE matchmatch criteria | cpe:2.3:a:cisco:webex_meetings_server:t30:*:*:*:*:*:*:* | ||
t31.11.2CPE matchmatch criteria | cpe:2.3:a:cisco:webex_meetings_server:t31.11.2:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.8 Bluesky, 0.5 Mastodon, and 1.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.