Security update for Cisco's WebEx WRF Player

Cisco Systems has released an update for its WRF Player, part of its WebEx video service, which eliminates multiple buffer overflows. According to a report, some of the bugs may be exploited in order to compromise a system. The player is used to playback recordings of video conferences made in WebEx recording format (WRF) using WebEx.

The player is not installed as part of the default WebEx installation, but according to Cisco, is only installed if a user accesses a WRF file on a WebEx server. Versions for Windows, Mac OS X and Linux are all affected.

See also:

•  Multiple Cisco WebEx WRF Player Vulnerabilities, a Cisco report.

(trk)