#How to play wrf videos update#
#How to play wrf videos code#
#How to play wrf videos windows#

#How to play wrf videos update#

Francis Provencher (PRL) working with Trend Micro Zero Day Initiative, and Kexu Wang of FortinetвЂ™s FortiGuard Labs were credited with discovering the flaws (Threatpost has reached out to both researchers for further details of the vulnerability and will update this post accordingly). To determine which release of Cisco Webex Network Recording Player or Cisco Webex Player is installed on a system, users can open the player and choose Help > About.В The fixed releases can be found below.Д¬isco said itвЂ™s not aware of the flaws being exploited by attackers at this time. And, for Cisco Webex Meetings Server, versions of Webex Network Recording Player earlier 3.0MR3SecurityPatch1 and 4.0MR2SecurityPatch2 are affected. For Webex Meetings Online, affected versions for both products include releases earlier than 1.3.49. The players are available from Cisco Webex Meetings and Cisco Webex Meetings Online (which is when conferencing systems are managed by Cisco Webex), and Cisco Webex Meetings Server (where customers host and manage conferencing solutions in their own private clouds).ДЇor Cisco Webex Meetings, affected versions for both products include releases earlier than WBS 39.5.17 or WBS 39.11.0.

#How to play wrf videos code#

In the worst case, this could lead to remote code execution in the context of the current process.вЂќДifferent versions of Webex Network Recording Player and Webex Player are affected by the flaws, based on the platforms they are being managed on. This program fails to initialize a pointer and later writes data to this pointer. вЂњSpecifically, this bug exists is in atpdmod.dll module and the vulnerable code is reachable using a crafted ARF File. вЂњUser interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file,вЂќ he told Threatpost via email. вЂњA successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.вЂќД«rian Gorenc, director of vulnerability research and head of Trend MicroвЂ™s ZDI program, told Threatpost that the flaw allows remote attackers to execute arbitrary code вЂ“ but it does require user interaction. While Cisco did not detail the technicalities of the vulnerabilities, it said that вЂњan attacker could exploit these vulnerabilities by sending a malicious ARF or WRF file to a user through a link or email attachment and persuading the user to open the file on the local system,вЂќ according to Cisco in a Wednesday advisory. They stem from an insufficient validation of non-detailed, вЂњcertain elementsвЂќ within a Webex recording that is stored in either ARF or WRF, said Cisco. The vulnerabilities ( CVE-2020-3127 and CVE-2020-3128) are both 7.8 out of 10.0 on the CVSS scale, making them high-severity. WRF files contain audio and video recordings, typically used for demonstrations, training and conferencing.

#How to play wrf videos windows#

Cisco Webex Player is also affected, which used to play back Webex Recording Format (WRF) files on the Windows OS. ARF files contain data from a recorded online meeting, such as video data and a list of attendees. First is the Cisco Webex Network Recording Player, used to play back Advanced Recording Format (ARF) files on the Windows operating system. Two multimedia players tied to the Webex platform are impacted. Cisco Systems has patched two high-severity vulnerabilities in its popular Webex video conferencing platform, which if exploited could allow an attacker to execute code on affected systems.