In most cases this will be a maintenance upgrade to software that was previously purchased. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license:Īdditionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. Customers may only install and expect support for software versions and feature sets for which they have purchased a license.

The player can also be installed manually from the Cisco Webex website or from a user’s Webex site.Ĭisco has released free software updates that address the vulnerabilities described in this advisory.

It is not available from Cisco Webex Meetings Server. It is available from Cisco Webex Meetings sites and Cisco Webex Meetings Online. The player can be installed manually from the Cisco Webex website, from a user’s Webex site, or automatically when a user accesses an ARF file for streaming playback from a Cisco Webex Meetings site.Ĭisco Webex Player is the application that is used to play back WRF files. It is available from Cisco Webex Meetings sites, Cisco Webex Meetings Online, and Cisco Webex Meetings Server. These services can also be configured to allow users to record meetings directly on their local computers as WRF files.Ĭisco Webex Network Recording Player is the application that is used to play back ARF files. Cisco Webex Meetings Server is a multimedia conferencing solution that customers host, manage, and maintain in their private clouds.Ĭisco Webex Meetings services can be configured to allow users to store meeting recordings online and download those recordings as ARF files. This advisory is available at the following link:Ĭisco Webex Meetings services and Cisco Webex Meetings Online are hosted, multimedia conferencing solutions that are managed and maintained by Cisco Webex. There are no workarounds that address these vulnerabilities. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.Ĭisco has released software updates that address these vulnerabilities. An attacker could exploit these vulnerabilities by sending a user a malicious ARF or WRF file through a link or email attachment and persuading the user to open the file with the affected software on the local system.

The vulnerabilities exist due to insufficient validation of certain elements with a Webex recording stored in either the Advanced Recording Format (ARF) or the Webex Recording Format (WRF). Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.

Cisco webex recorder player