var-201210-0316
Vulnerability from variot

Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file, aka Bug ID CSCua61331. Cisco WebEx Recording Format (WRF) Player Contains a buffer overflow vulnerability. Cisco WebEx is prone to multiple remote memory-corruption vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Cisco WebEx is a set of Web conferencing tools developed by American Cisco (Cisco), which can assist office workers in different places to coordinate and cooperate. WebEx services include Web conferencing, telepresence video conferencing and enterprise instant messaging (IM). -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/

Cisco WebEx .wrf Memory Corruption Vulnerability

  1. Advisory Information

Title: Cisco WebEx .wrf Memory Corruption Vulnerability Advisory ID: CORE-2012-0613 Advisory URL: http://www.coresecurity.com/content/webex-wrf-memory-corruption-vulnerability Date published: 2012-10-11 Date of last update: 2012-09-13 Vendors contacted: Cisco Release mode: Coordinated release

  1. Vulnerability Information

Class: Access of Memory Location After End of Buffer [CWE-788] Impact: Code execution Remotely Exploitable: No Locally Exploitable: Yes CVE Name: CVE-2012-3939

  1. Vulnerability Description

A vulnerability exists in atas32.dll affecting Cisco WebEx Player v3.26 that allows an attacker to corrupt memory, which may lead to code execution in the context of the currently logged on user.

  1. Vulnerable packages

. Cisco WebEx Player v3.26 . Cisco Meeting Center and older versions of WebEx Player are probably affected too, but they were not checked.

  1. Vendor Information, Solutions and Workarounds

If the Cisco WebEx WRF Player was automatically installed, it will be automatically upgraded to the latest, nonvulnerable version when users access a recording file that is hosted on a WebEx meeting site. A non-vulnerable version of Cisco WebEx Player should be available at http://www.webex.com/downloadplayer.html.

  1. Credits

This vulnerability was discovered and researched by Oren Isacson. The publication of this advisory was coordinated by Fernando russ.

  1. Technical Description / Proof of Concept

The memory corruption is caused by a call to the memcpy function with an invalid destination parameter.

In our proof of concept (POC), the destination parameter to the memcpy function points to unmapped memory. The source parameters points to valid heap memory. The size parameter is equal to 540. As the destination parameter is close to the top of the heap, and the source parameter points to data that may be user-controlled, this vulnerability may be leveraged to execute code.

  1. Report Timeline

. 2012-06-21: Core Security Technologies notifies Cisco Product Security Incident Response Team of the vulnerability, including a brief description of the issue. 2012-06-21: Cisco PSIRT acknowledges the receipt of the information. Vendor asks for detailed technical information. 2012-06-21: Core sends a draft version of the advisory and a PoC .wrf file which reproduce the issue. 2012-06-25: Cisco PSIRT asks for more information regarding the exact version of the atas32.dll libary version. 2012-06-25: Core sends the requested information. 2012-07-11: Core notifies that the tentative publication deadline was missed and reschedule the publication for August 6th, 2012. 2012-07-12: Cisco PSIRT asks if the advisory publication can be hold until they have finished its fixes. 2012-07-12: Core notifies that the current publication date is tentative and can be moved while the new publication date keeps reasonable. 2012-07-16: Cisco PSIRT informs that they can't be sure of having fixes sooner that beginning of September. 2012-07-17: Core acknowledges the new timeframe for the publication and asks for a more specific date. 2012-07-20: Cisco PSIRT informs that the new publication date for the fixes and all the related information regarding this vulnerability is September 12th, 2012. 2012-07-23: Core Security Technologies acknowledges the new deadline for the publication. 2012-08-23: Cisco PSIRT asks to postpone the publication date to October 10th, 2012. 2012-08-27: Core acknowledges the new deadline for the publication. 2012-09-12: Publication date confirmed on [2012-07-20] missed. 2012-10-11: Advisory CORE-2012-0613 published.

  1. About CoreLabs

CoreLabs, the research center of Core Security Technologies, is charged with anticipating the future needs and requirements for information security technologies. We conduct our research in several important areas of computer security including system vulnerabilities, cyber attack planning and simulation, source code auditing, and cryptography. Our results include problem formalization, identification of vulnerabilities, novel solutions and prototypes for new technologies. CoreLabs regularly publishes security advisories, technical papers, project information and shared software tools for public use at: http://corelabs.coresecurity.com.

  1. About Core Security Technologies

Core Security Technologies enables organizations to get ahead of threats with security test and measurement solutions that continuously identify and demonstrate real-world exposures to their most critical assets. Our customers can gain real visibility into their security standing, real validation of their security controls, and real metrics to more effectively secure their organizations.

Core Security's software solutions build on over a decade of trusted research and leading-edge threat expertise from the company's Security Consulting Services, CoreLabs and Engineering groups. Core Security Technologies can be reached at +1 (617) 399-6980 or on the Web at: http://www.coresecurity.com.

  1. Disclaimer

The contents of this advisory are copyright (c) 2012 Core Security Technologies and (c) 2012 CoreLabs, and are licensed under a Creative Commons Attribution Non-Commercial Share-Alike 3.0 (United States) License: http://creativecommons.org/licenses/by-nc-sa/3.0/us/

  1. PGP/GPG Keys

This advisory has been signed with the GPG key of Core Security Technologies advisories team, which is available for download at http://www.coresecurity.com/files/attachments/core_security_advisories.asc.

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (Darwin) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/

iQEcBAEBAgAGBQJQdyjEAAoJEK6bq3WCdh+HiPEH+wVJOMXbci4VXZjJLKuabrM8 sm2l7wdUx7ebPxm5wG05ns+9joRjtiXxXVSZWrpWtrKcTHlPWYm8iPYbnGGOi9vs NpFz+fMSncT/MIFhQBePJQkcPhEeqVEtdVc+DCXv+WfQ6MNxpbGhLj7O1mXxJOUN 5aes2i8iBVxdzEPydVApG+Fz0YDeonlh7djEKwyUZCzHJlb7ZOUiKtaXLrWM7PLc +xzMLCaBzm+srm7mo/71nD7/OKcAfR14m8gixxPkjmdWjf831Sd5yeAzZF/o3bAG RTMsZ2WKNmYqWL+KbdMTmYhF0G2eM0jYmpdkXc7zUhb85GuHJD3PDAQGTjAZkjQ= =9sT3 -----END PGP SIGNATURE-----

. ----------------------------------------------------------------------

The final version of the CSI 6.0 has been released. Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/

TITLE: Cisco WebEx Recording Format Player Multiple Vulnerabilities

SECUNIA ADVISORY ID: SA50905

VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/50905/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=50905

RELEASE DATE: 2012-10-11

DISCUSS ADVISORY: http://secunia.com/advisories/50905/#comments

AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s)

http://secunia.com/advisories/50905/

ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS

https://ca.secunia.com/?page=viewadvisory&vuln_id=50905

ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING

http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/

DESCRIPTION: Multiple vulnerabilities have been reported in Cisco WebEx Recording Format Player, which can be exploited by malicious people to compromise a user's system.

1) An unspecified error can be exploited to cause a buffer overflow via a specially crafted WRF file.

2) An unspecified error can be exploited to cause a buffer overflow via a specially crafted WRF file.

3) An unspecified error can be exploited to cause a buffer overflow via a specially crafted WRF file.

4) An unspecified error can be exploited to corrupt memory via a specially crafted WRF file.

5) An unspecified error can be exploited to cause a buffer overflow via a specially crafted WRF file.

6) An unspecified error can be exploited to cause a heap-based buffer overflow via a specially crafted WRF file.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

The vulnerabilities are reported in the following versions: * T28 client builds prior to T28.4 (28.4) * T27 client builds prior to T27LDSP32EP10 (27.32.10)

SOLUTION: Update to version 28.4 or 27.32.10.

Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

PROVIDED AND/OR DISCOVERED BY: The vendor credits Beyond Security, Core Security, Codenomicon, and TELUS.

ORIGINAL ADVISORY: Cisco: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-webex

OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities.

Subscribe: http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/

Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.

Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

Show details on source website

To clipboard 

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201210-0316",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "webex recording format player",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "27.32.1"
      },
      {
        "model": "webex recording format player",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "27.11.26"
      },
      {
        "model": "webex recording format player",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "28.0.0"
      },
      {
        "model": "webex recording format player",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "27.25.10"
      },
      {
        "model": "webex recording format player",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "27.21.10"
      },
      {
        "model": "webex recording format player",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "cisco",
        "version": "t28 client build"
      },
      {
        "model": "webex recording format player",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "cisco",
        "version": "t27 client build"
      },
      {
        "model": "webex recording format player",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "cisco",
        "version": "t28.4 (28.4)"
      },
      {
        "model": "webex recording format player",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "cisco",
        "version": "t27ldsp32ep10 (27.32.10)"
      },
      {
        "model": "webex t27 ld sp32 cp1",
        "scope": null,
        "trust": 0.6,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "webex t27 ld sp32",
        "scope": null,
        "trust": 0.6,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "webex t27 lc sp25 ep9",
        "scope": null,
        "trust": 0.6,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "webex t27 lc sp25 ep10",
        "scope": null,
        "trust": 0.6,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "webex t27 lb sp21 ep10",
        "scope": null,
        "trust": 0.6,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "webex t27 l sp11 ep26",
        "scope": null,
        "trust": 0.6,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "webex t27 fr20",
        "scope": null,
        "trust": 0.6,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "webex",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "cisco",
        "version": "27.00"
      },
      {
        "model": "webex",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "27.10"
      },
      {
        "model": "webex (mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "x)27.11.8"
      },
      {
        "model": "webex (mac os t27 sp28",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "x)"
      },
      {
        "model": "webex (mac os t27 sp25 ep3",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "x)"
      },
      {
        "model": "webex (mac os t27 sp23",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "x)"
      },
      {
        "model": "webex (mac os t27 sp21 ep9",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "x)"
      },
      {
        "model": "webex (mac os t27 sp11 ep23",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "x)"
      },
      {
        "model": "webex (mac os t27 ld sp32 cp1",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "x)"
      },
      {
        "model": "webex (mac os t27 ld sp32",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "x)"
      },
      {
        "model": "webex (mac os t27 lc sp25 ep9",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "x)"
      },
      {
        "model": "webex (mac os t27 lc sp25 ep10",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "x)"
      },
      {
        "model": "webex (mac os t27 lb sp21 ep10",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "x)"
      },
      {
        "model": "webex (mac os t27 l sp11 ep26",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "x)"
      },
      {
        "model": "webex (mac os t27 fr20",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "x)"
      },
      {
        "model": "webex (mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "x)27.00"
      },
      {
        "model": "webex",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "27.11.8"
      },
      {
        "model": "webex t27 sp28",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "webex t27 sp25 ep3",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "webex t27 sp23",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "webex t27 sp21 ep9",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "webex t27 sp11 ep23",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "BID",
        "id": "55866"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005134"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-236"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-3939"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:cisco:webex_recording_format_player",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005134"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Beyond Security, Core Security, Codenomicon, and TELUS",
    "sources": [
      {
        "db": "BID",
        "id": "55866"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2012-3939",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "id": "CVE-2012-3939",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 1.8,
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "id": "VHN-57220",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:M/AU:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2012-3939",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2012-3939",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201210-236",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "VULHUB",
            "id": "VHN-57220",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-57220"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005134"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-236"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-3939"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file, aka Bug ID CSCua61331. Cisco WebEx Recording Format (WRF) Player Contains a buffer overflow vulnerability. Cisco WebEx is prone to multiple remote memory-corruption vulnerabilities. \nAn attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Cisco WebEx is a set of Web conferencing tools developed by American Cisco (Cisco), which can assist office workers in different places to coordinate and cooperate. WebEx services include Web conferencing, telepresence video conferencing and enterprise instant messaging (IM). \n-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\nCore Security - Corelabs Advisory\nhttp://corelabs.coresecurity.com/\n\nCisco WebEx .wrf Memory Corruption Vulnerability\n\n\n\n1. *Advisory Information*\n\nTitle: Cisco WebEx .wrf Memory Corruption Vulnerability\nAdvisory ID: CORE-2012-0613\nAdvisory URL:\nhttp://www.coresecurity.com/content/webex-wrf-memory-corruption-vulnerability\nDate published: 2012-10-11\nDate of last update: 2012-09-13\nVendors contacted: Cisco\nRelease mode: Coordinated release\n\n\n\n2. *Vulnerability Information*\n\nClass: Access of Memory Location After End of Buffer [CWE-788]\nImpact: Code execution\nRemotely Exploitable: No\nLocally Exploitable: Yes\nCVE Name: CVE-2012-3939\n\n\n\n3. *Vulnerability Description*\n\nA vulnerability exists in atas32.dll affecting Cisco WebEx Player v3.26\nthat allows an attacker to corrupt memory, which may lead to code\nexecution in the context of the currently logged on user. \n\n\n4. *Vulnerable packages*\n\n   . Cisco WebEx Player v3.26\n   . Cisco Meeting Center and older versions of WebEx Player are\nprobably affected too, but they were not checked. \n\n\n5. *Vendor Information, Solutions and Workarounds*\n\nIf the Cisco WebEx WRF Player was automatically installed, it will be\nautomatically upgraded to the latest, nonvulnerable version when users\naccess a recording file that is hosted on a WebEx meeting site. A\nnon-vulnerable version of Cisco WebEx Player should be available at\nhttp://www.webex.com/downloadplayer.html. \n\n\n6. *Credits*\n\nThis vulnerability was discovered and researched by Oren Isacson. The\npublication of this advisory was coordinated by Fernando russ. \n\n\n7. *Technical Description / Proof of Concept*\n\nThe memory corruption is caused by a call to the memcpy function with an\ninvalid destination parameter. \n\nIn our proof of concept (POC), the destination parameter to the memcpy\nfunction points to unmapped memory. The source parameters points to\nvalid heap memory. The size parameter is equal to 540. As the\ndestination parameter is close to the top of the heap, and the source\nparameter points to data that may be user-controlled, this vulnerability\nmay be leveraged to execute code. \n\n\n8. *Report Timeline*\n\n. 2012-06-21:\nCore Security Technologies notifies Cisco Product Security Incident\nResponse Team of the vulnerability, including a brief description of the\nissue. 2012-06-21:\nCisco PSIRT acknowledges the receipt of the information. Vendor asks for\ndetailed technical information. 2012-06-21:\nCore sends a draft version of the advisory and a PoC .wrf file which\nreproduce the issue. 2012-06-25:\nCisco PSIRT asks for more information regarding the exact version of the\natas32.dll libary version. 2012-06-25:\nCore sends the requested information. 2012-07-11:\nCore notifies that the tentative publication deadline was missed and\nreschedule the publication for August 6th, 2012. 2012-07-12:\nCisco PSIRT asks if the advisory publication can be hold until they have\nfinished its fixes. 2012-07-12:\nCore notifies that the current publication date is tentative and can be\nmoved while the new publication date keeps reasonable. 2012-07-16:\nCisco PSIRT informs that they can\u0027t be sure of having fixes sooner that\nbeginning of September. 2012-07-17:\nCore acknowledges the new timeframe for the publication and asks for a\nmore specific date. 2012-07-20:\nCisco PSIRT informs that the new publication date for the fixes and all\nthe related information regarding this vulnerability is September 12th,\n2012. 2012-07-23:\nCore Security Technologies acknowledges the new deadline for the\npublication. 2012-08-23:\nCisco PSIRT asks to postpone the publication date to October 10th, 2012. 2012-08-27:\nCore acknowledges the new deadline for the publication. 2012-09-12:\nPublication date confirmed on [2012-07-20] missed. 2012-10-11:\nAdvisory CORE-2012-0613 published. \n\n\n\n9. *About CoreLabs*\n\nCoreLabs, the research center of Core Security Technologies, is charged\nwith anticipating the future needs and requirements for information\nsecurity technologies. We conduct our research in several important\nareas of computer security including system vulnerabilities, cyber\nattack planning and simulation, source code auditing, and cryptography. \nOur results include problem formalization, identification of\nvulnerabilities, novel solutions and prototypes for new technologies. \nCoreLabs regularly publishes security advisories, technical papers,\nproject information and shared software tools for public use at:\nhttp://corelabs.coresecurity.com. \n\n\n10. *About Core Security Technologies*\n\nCore Security Technologies enables organizations to get ahead of threats\nwith security test and measurement solutions that continuously identify\nand demonstrate real-world exposures to their most critical assets. Our\ncustomers can gain real visibility into their security standing, real\nvalidation of their security controls, and real metrics to more\neffectively secure their organizations. \n\nCore Security\u0027s software solutions build on over a decade of trusted\nresearch and leading-edge threat expertise from the company\u0027s Security\nConsulting Services, CoreLabs and Engineering groups. Core Security\nTechnologies can be reached at +1 (617) 399-6980 or on the Web at:\nhttp://www.coresecurity.com. \n\n\n11. *Disclaimer*\n\nThe contents of this advisory are copyright (c) 2012 Core Security\nTechnologies and (c) 2012 CoreLabs, and are licensed under a Creative\nCommons Attribution Non-Commercial Share-Alike 3.0 (United States)\nLicense: http://creativecommons.org/licenses/by-nc-sa/3.0/us/\n\n\n12. *PGP/GPG Keys*\n\nThis advisory has been signed with the GPG key of Core Security\nTechnologies advisories team, which is available for download at\nhttp://www.coresecurity.com/files/attachments/core_security_advisories.asc. \n\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.12 (Darwin)\nComment: Using GnuPG with Mozilla - http://www.enigmail.net/\n\niQEcBAEBAgAGBQJQdyjEAAoJEK6bq3WCdh+HiPEH+wVJOMXbci4VXZjJLKuabrM8\nsm2l7wdUx7ebPxm5wG05ns+9joRjtiXxXVSZWrpWtrKcTHlPWYm8iPYbnGGOi9vs\nNpFz+fMSncT/MIFhQBePJQkcPhEeqVEtdVc+DCXv+WfQ6MNxpbGhLj7O1mXxJOUN\n5aes2i8iBVxdzEPydVApG+Fz0YDeonlh7djEKwyUZCzHJlb7ZOUiKtaXLrWM7PLc\n+xzMLCaBzm+srm7mo/71nD7/OKcAfR14m8gixxPkjmdWjf831Sd5yeAzZF/o3bAG\nRTMsZ2WKNmYqWL+KbdMTmYhF0G2eM0jYmpdkXc7zUhb85GuHJD3PDAQGTjAZkjQ=\n=9sT3\n-----END PGP SIGNATURE-----\n\n\n. ----------------------------------------------------------------------\n\nThe final version of the CSI 6.0 has been released. \nFind out why this is not just another Patch Management solution: http://secunia.com/blog/325/\n\n----------------------------------------------------------------------\n\nTITLE:\nCisco WebEx Recording Format Player Multiple Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA50905\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/50905/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=50905\n\nRELEASE DATE:\n2012-10-11\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/50905/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/50905/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=50905\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nMultiple vulnerabilities have been reported in Cisco WebEx Recording\nFormat Player, which can be exploited by malicious people to\ncompromise a user\u0027s system. \n\n1) An unspecified error can be exploited to cause a buffer overflow\nvia a specially crafted WRF file. \n\n2) An unspecified error can be exploited to cause a buffer overflow\nvia a specially crafted WRF file. \n\n3) An unspecified error can be exploited to cause a buffer overflow\nvia a specially crafted WRF file. \n\n4) An unspecified error can be exploited to corrupt memory via a\nspecially crafted WRF file. \n\n5) An unspecified error can be exploited to cause a buffer overflow\nvia a specially crafted WRF file. \n\n6) An unspecified error can be exploited to cause a heap-based buffer\noverflow via a specially crafted WRF file. \n\nSuccessful exploitation of the vulnerabilities may allow execution of\narbitrary code. \n\nThe vulnerabilities are reported in the following versions:\n* T28 client builds prior to T28.4 (28.4)\n* T27 client builds prior to T27LDSP32EP10 (27.32.10)\n\nSOLUTION:\nUpdate to version 28.4 or 27.32.10. \n\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nPROVIDED AND/OR DISCOVERED BY:\nThe vendor credits Beyond Security, Core Security, Codenomicon, and\nTELUS. \n\nORIGINAL ADVISORY:\nCisco:\nhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-webex\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2012-3939"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005134"
      },
      {
        "db": "BID",
        "id": "55866"
      },
      {
        "db": "VULHUB",
        "id": "VHN-57220"
      },
      {
        "db": "PACKETSTORM",
        "id": "117362"
      },
      {
        "db": "PACKETSTORM",
        "id": "117325"
      }
    ],
    "trust": 2.16
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2012-3939",
        "trust": 2.9
      },
      {
        "db": "BID",
        "id": "55866",
        "trust": 1.4
      },
      {
        "db": "OSVDB",
        "id": "86138",
        "trust": 1.1
      },
      {
        "db": "SECTRACK",
        "id": "1027639",
        "trust": 1.1
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005134",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-236",
        "trust": 0.7
      },
      {
        "db": "SECUNIA",
        "id": "50905",
        "trust": 0.7
      },
      {
        "db": "CISCO",
        "id": "20121010 MULTIPLE VULNERABILITIES IN THE CISCO WEBEX RECORDING FORMAT PLAYER",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "117362",
        "trust": 0.2
      },
      {
        "db": "VULHUB",
        "id": "VHN-57220",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "117325",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-57220"
      },
      {
        "db": "BID",
        "id": "55866"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005134"
      },
      {
        "db": "PACKETSTORM",
        "id": "117362"
      },
      {
        "db": "PACKETSTORM",
        "id": "117325"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-236"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-3939"
      }
    ]
  },
  "id": "VAR-201210-0316",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-57220"
      }
    ],
    "trust": 0.69583333
  },
  "last_update_date": "2024-11-23T22:13:58.953000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "cisco-sa-20121010-webex",
        "trust": 0.8,
        "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-webex"
      },
      {
        "title": "27109",
        "trust": 0.8,
        "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=27109"
      },
      {
        "title": "cisco-sa-20121010-webex",
        "trust": 0.8,
        "url": "http://www.cisco.com/cisco/web/support/JP/111/1116/1116639_cisco-sa-20121010-webex-j.html"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005134"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-119",
        "trust": 1.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-57220"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005134"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-3939"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.8,
        "url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20121010-webex"
      },
      {
        "trust": 1.1,
        "url": "http://www.securityfocus.com/bid/55866"
      },
      {
        "trust": 1.1,
        "url": "http://osvdb.org/86138"
      },
      {
        "trust": 1.1,
        "url": "http://www.securitytracker.com/id?1027639"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-3939"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-3939"
      },
      {
        "trust": 0.6,
        "url": "http://secunia.com/advisories/50905"
      },
      {
        "trust": 0.3,
        "url": "http://www.webex.com/"
      },
      {
        "trust": 0.1,
        "url": "http://www.coresecurity.com/content/webex-wrf-memory-corruption-vulnerability"
      },
      {
        "trust": 0.1,
        "url": "http://www.coresecurity.com/files/attachments/core_security_advisories.asc."
      },
      {
        "trust": 0.1,
        "url": "http://www.enigmail.net/"
      },
      {
        "trust": 0.1,
        "url": "http://corelabs.coresecurity.com/"
      },
      {
        "trust": 0.1,
        "url": "http://www.webex.com/downloadplayer.html."
      },
      {
        "trust": 0.1,
        "url": "http://www.coresecurity.com."
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3939"
      },
      {
        "trust": 0.1,
        "url": "http://creativecommons.org/licenses/by-nc-sa/3.0/us/"
      },
      {
        "trust": 0.1,
        "url": "http://corelabs.coresecurity.com."
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_intelligence/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/secunia_security_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
      },
      {
        "trust": 0.1,
        "url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=50905"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/50905/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_scanning/personal/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/blog/325/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/50905/#comments"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/about_secunia_advisories/"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-57220"
      },
      {
        "db": "BID",
        "id": "55866"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005134"
      },
      {
        "db": "PACKETSTORM",
        "id": "117362"
      },
      {
        "db": "PACKETSTORM",
        "id": "117325"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-236"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-3939"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULHUB",
        "id": "VHN-57220"
      },
      {
        "db": "BID",
        "id": "55866"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005134"
      },
      {
        "db": "PACKETSTORM",
        "id": "117362"
      },
      {
        "db": "PACKETSTORM",
        "id": "117325"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-236"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-3939"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2012-10-25T00:00:00",
        "db": "VULHUB",
        "id": "VHN-57220"
      },
      {
        "date": "2012-10-10T00:00:00",
        "db": "BID",
        "id": "55866"
      },
      {
        "date": "2012-10-29T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-005134"
      },
      {
        "date": "2012-10-13T00:01:39",
        "db": "PACKETSTORM",
        "id": "117362"
      },
      {
        "date": "2012-10-11T10:07:14",
        "db": "PACKETSTORM",
        "id": "117325"
      },
      {
        "date": "2012-10-16T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201210-236"
      },
      {
        "date": "2012-10-25T14:55:03.717000",
        "db": "NVD",
        "id": "CVE-2012-3939"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2013-05-04T00:00:00",
        "db": "VULHUB",
        "id": "VHN-57220"
      },
      {
        "date": "2015-03-19T09:16:00",
        "db": "BID",
        "id": "55866"
      },
      {
        "date": "2012-10-29T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-005134"
      },
      {
        "date": "2012-10-29T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201210-236"
      },
      {
        "date": "2024-11-21T01:41:50.010000",
        "db": "NVD",
        "id": "CVE-2012-3939"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-236"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Cisco WebEx Recording Format Player Vulnerable to buffer overflow",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005134"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "buffer overflow",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-236"
      }
    ],
    "trust": 0.6
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.