Vulnerability Details : CVE-2014-3311
Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467.
Vulnerability category: OverflowExecute code
Exploit prediction scoring system (EPSS) score for CVE-2014-3311
Probability of exploitation activity in the next 30 days: 2.83%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 89 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2014-3311
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
5.1
|
MEDIUM | AV:N/AC:H/Au:N/C:P/I:P/A:P |
4.9
|
6.4
|
NIST |
CWE ids for CVE-2014-3311
-
The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-3311
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/94432
Cisco WebEx Meetings Server and Meeting Center buffer overflow CVE-2014-3311 Vulnerability Report
-
http://www.securityfocus.com/bid/68502
Cisco WebEx Meetings Client File Sharing Functionality Remote Heap Buffer Overflow Vulnerability
-
http://www.securitytracker.com/id/1030550
Cisco WebEx Meetings Server and WebEx Meeting Center Heap Overflow Lets Remote Users Execute Arbitrary Code - SecurityTracker
-
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3311
Cisco WebEx Meetings Client Heap-Based Buffer Overflow VulnerabilityVendor Advisory
Products affected by CVE-2014-3311
- cpe:2.3:a:cisco:webex_meeting_center:-:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meetings_server:-:*:*:*:*:*:*:*