CVE-2018-0104

A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute arbitrary code on the system of a targeted user. The attacker could exploit this vulnerability by sending the user a link or email attachment with a malicious ARF file and persuading the user to follow the link or launch the file. Successful exploitation could allow the attacker to execute arbitrary code on the user's system. This vulnerability affects Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetings sites, Cisco WebEx Meetings Server, and Cisco WebEx ARF players. Cisco Bug IDs: CSCvg78853, CSCvg78856, CSCvg78857.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/102382Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180103-warfpMitigation, Vendor Advisory
• http://www.securityfocus.com/bid/102382Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180103-warfpMitigation, Vendor Advisory

Published

Jan 4, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0098A vulnerability in the web-based management interface of Cis…
• CVE-2018-0099A vulnerability in the web management GUI of the Cisco D9800…
• CVE-2018-0100A vulnerability in the Profile Editor of the Cisco AnyConnec…
• CVE-2018-0101A vulnerability in the Secure Sockets Layer (SSL) VPN functi…10
• CVE-2018-0102A vulnerability in the Pong tool of Cisco NX-OS Software cou…
• CVE-2018-0103A Buffer Overflow vulnerability in Cisco WebEx Network Recor…
• CVE-2018-0105A vulnerability in the web framework of Cisco Unified Commun…5.3
• CVE-2018-0106A vulnerability in the ConfD server of the Cisco Elastic Ser…3.3
• CVE-2018-0107A vulnerability in the web framework of Cisco Prime Service …
• CVE-2018-0108A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2018-0109A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2018-0110A vulnerability in Cisco WebEx Meetings Server could allow a…