CVE-2009-2876

Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T27SP10) for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted WebEx Recording Format (WRF) file, a different vulnerability than CVE-2009-2878 and CVE-2009-2879.

• CWE-119

• http://fgc.fortinet.com/encyclopedia/vulnerability/fg-vd-09-012-cisco.html
• http://secunia.com/advisories/37810Vendor Advisory
• http://securitytracker.com/id?1023360
• http://tools.cisco.com/security/center/viewAlert.x?alertId=19499Patch, Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456Patch, Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456Patch, Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456Patch, Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456Patch, Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456Patch, Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456Patch, Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtmlPatch, Vendor Advisory
• http://www.fortiguard.com/advisory/FGA-2009-48.html
• http://www.osvdb.org/61126
• http://www.securityfocus.com/bid/37352
• http://www.vupen.com/english/advisories/2009/3574Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54841
• http://fgc.fortinet.com/encyclopedia/vulnerability/fg-vd-09-012-cisco.html
• http://secunia.com/advisories/37810Vendor Advisory
• http://securitytracker.com/id?1023360
• http://tools.cisco.com/security/center/viewAlert.x?alertId=19499Patch, Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456Patch, Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456Patch, Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456Patch, Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456Patch, Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456Patch, Vendor Advisory
• http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456Patch, Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtmlPatch, Vendor Advisory
• http://www.fortiguard.com/advisory/FGA-2009-48.html
• http://www.osvdb.org/61126
• http://www.securityfocus.com/bid/37352
• http://www.vupen.com/english/advisories/2009/3574Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54841

Published

Dec 18, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2870Unspecified vulnerability in Cisco IOS 12.2 through 12.4, wh…
• CVE-2009-2871Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when S…
• CVE-2009-2872Cisco IOS 12.0 through 12.4, when IP-based tunnels and the C…
• CVE-2009-2873Cisco IOS 12.0 through 12.4, when IP-based tunnels and the C…
• CVE-2009-2874The TimesTenD process in Cisco Unified Presence 1.x, 6.x bef…
• CVE-2009-2875Buffer overflow in atas32.dll in the Cisco WebEx WRF Player …
• CVE-2009-2877Stack-based buffer overflow in ataudio.dll in the Cisco WebE…
• CVE-2009-2878Heap-based buffer overflow in atas32.dll in the Cisco WebEx …
• CVE-2009-2879Heap-based buffer overflow in atas32.dll in the Cisco WebEx …
• CVE-2009-2880Buffer overflow in atrpui.dll in the Cisco WebEx WRF Player …
• CVE-2009-2881Multiple SQL injection vulnerabilities in Basilic 1.5.13 all…
• CVE-2009-2882Multiple cross-site scripting (XSS) vulnerabilities in PG Ma…