A vulnerability has been reported in WebEx Advanced Recording Format Player, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error when processing ARF files and can be exploited to cause a buffer overflow.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in the following versions:
* Client builds 28.0.0 (T28 L10N).
* Client builds 27.32.1 (T27 LD SP32 CP1) and prior.
* Client builds 27.25.10 (T27 LC SP25 EP10) and prior.
* Client builds 27.21.10 (T27 LB SP21 EP10) and prior.
* Client builds 27.11.26 (T27 L SP11 EP26) and prior.

Solution
Update to a fixed client build (please see the vendor's advisory for details).

Provided and/or discovered by
Microsoft Vulnerability Research (MSVR).

The vendor also credits iDefense.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Cisco:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120627-webex

MSVR:
http://technet.microsoft.com/en-us/security/msvr/msvr12-010

Deep Links
Links available to Secunia VIM customers