CVE-2017-12368

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL and convincing the user to launch the file. Exploitation of this could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. Cisco Bug IDs: CSCve10584, CSCve10591, CSCve11503, CSCve10658, CSCve11507, CSCve10749, CSCve10744, CSCve11532, CSCve10762, CSCve10764, CSCve11538.

• CWE-119
• CWE-119

• http://www.securityfocus.com/bid/102017Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039895Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-playersVendor Advisory
• http://www.securityfocus.com/bid/102017Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039895Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-webex-playersVendor Advisory

Published

Nov 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12362A vulnerability in Cisco Meeting Server versions prior to 2.…
• CVE-2017-12363A vulnerability in Cisco WebEx Meeting Server could allow an…
• CVE-2017-12364A SQL Injection vulnerability in the web framework of Cisco …
• CVE-2017-12365A vulnerability in Cisco WebEx Event Center could allow an a…
• CVE-2017-12366A vulnerability in Cisco WebEx Meeting Center could allow an…
• CVE-2017-12367A "Cisco WebEx Network Recording Player Denial of Service Vu…
• CVE-2017-12369A "Cisco WebEx Network Recording Player Out-of-Bounds Vulner…
• CVE-2017-1237IBM Jazz based applications are vulnerable to cross-site scr…5.4
• CVE-2017-12370A "Cisco WebEx Network Recording Player Remote Code Executio…
• CVE-2017-12371A "Cisco WebEx Network Recording Player Remote Code Executio…
• CVE-2017-12372A "Cisco WebEx Network Recording Player Remote Code Executio…
• CVE-2017-12373A vulnerability in the TLS protocol implementation of legacy…