Customers may only install and expect support for software versions and feature sets for which they have purchased a license. The player can be installed manually from a user's Cisco Webex website download page in Classic view, or from the Cisco Webex Video Recording page.Ĭisco has released free software updates that address the vulnerability described in this advisory. It is not available from Cisco Webex Meetings Server. It is available from Cisco Webex Meetings sites and Cisco Webex Meetings Online. The player can be installed manually from a user's Cisco Webex website download page in Classic view, or from the Cisco Webex Video Recording page.Ĭisco Webex Player is the application that is used to play back WRF files. It is available from Cisco Webex Meetings sites, Cisco Webex Meetings Online, and Cisco Webex Meetings Server. These services can also be configured to allow users to record meetings directly on their local computers as WRF files.Ĭisco Webex Network Recording Player is the application that is used to play back ARF files. Cisco Webex Meetings Server is a multimedia conferencing solution that customers host, manage, and maintain in their private clouds.Ĭisco Webex Meetings services can be configured to allow users to store meeting recordings online and download those recordings as ARF files. This advisory is available at the following link:Ĭisco Webex Meetings services and Cisco Webex Meetings Online are hosted, multimedia conferencing solutions that are managed and maintained by Cisco Webex. There are no workarounds that address this vulnerability. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.Ĭisco has released software updates that address this vulnerability. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file through a link or email attachment and persuading the user to open the file with the affected software on the local system.

The vulnerability exists due to insufficient validation of certain elements with a Webex recording stored in either the Advanced Recording Format (ARF) or the Webex Recording Format (WRF).

A vulnerability in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.

Download webex recording editor