CVE-2010-3269

Multiple stack-based buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to execute arbitrary code via a crafted (1) .wrf or (2) .arf file, related to use of a function pointer in a callback mechanism.

• CWE-119

• http://securitytracker.com/id?1025015
• http://tools.cisco.com/security/center/viewAlert.x?alertId=22016Patch
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtmlPatch, Vendor Advisory
• http://www.coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabilitiesPatch
• http://www.securityfocus.com/archive/1/516095/100/0/threaded
• http://www.securityfocus.com/bid/46075
• http://www.vupen.com/english/advisories/2011/0261Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65076
• http://securitytracker.com/id?1025015
• http://tools.cisco.com/security/center/viewAlert.x?alertId=22016Patch
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtmlPatch, Vendor Advisory
• http://www.coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabilitiesPatch
• http://www.securityfocus.com/archive/1/516095/100/0/threaded
• http://www.securityfocus.com/bid/46075
• http://www.vupen.com/english/advisories/2011/0261Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65076

Published

Feb 2, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3262Cross-site scripting (XSS) vulnerability in Flock Browser 3.…
• CVE-2010-3263Cross-site scripting (XSS) vulnerability in setup/frames/ind…
• CVE-2010-3264The engine installer in Novell Identity Manager (aka IDM) 3.…
• CVE-2010-3266Multiple cross-site scripting (XSS) vulnerabilities in BugTr…
• CVE-2010-3267Multiple SQL injection vulnerabilities in BugTracker.NET bef…
• CVE-2010-3268The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc…
• CVE-2010-3270Stack-based buffer overflow in Cisco WebEx Meeting Center T2…
• CVE-2010-3271Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2010-3272accounts/ValidateAnswers in the security-questions implement…
• CVE-2010-3273ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 a…
• CVE-2010-3274Multiple cross-site scripting (XSS) vulnerabilities in Emplo…
• CVE-2010-3275libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.…