CVE-2013-1118 Memory corruption in n/a

Critical 9.3 Published 6 Sep 2013 Updated 17 Sep 2024

Remote attackers can execute arbitrary code by tricking users into opening a malicious WRF file in the Cisco WebEx Recording Format player.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2013-1118?

CVE-2013-1118 is a critical memory corruption vulnerability in n/a, published on 6 Sep 2013. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Stack-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCuc27645.

Weakness: CWE-119

Which versions are affected by CVE-2013-1118?

It affects 1 product.

Products include Cisco Webex Recording Format Player.

How do I fix CVE-2013-1118?

No fix has been published for CVE-2013-1118 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2013-1118 being exploited?

There is no known exploitation of CVE-2013-1118 in the wild and no public exploit code.

Sources

Also known as GHSA-2gf3-rvfh-38c3.