← Vulnerability feed

Vulnerability record · CVE-2010-3269 · published 2 February 2011

CVE-2010-3269: Cisco webex recording format player memory buffer overflow vulnerability

Cisco · Webex Recording Format Player

Multiple stack-based buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to execute arbitrary code via a crafted (1) .wrf or (2) .arf file, related to use of a function pointer in a callback mechanism.

9.3 CVSS 2.0 High EPSS 11% · top 4.1% CWE-119 · Memory buffer overflow
9.3CVSS 2.0 base score
11%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
16References
16 Jun 2026Last modified by NVD

Description

Multiple stack-based buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to execute arbitrary code via a crafted (1) .wrf or (2) .arf file, related to use of a function pointer in a callback mechanism.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://securitytracker.com/id?1025015
http://tools.cisco.com/security/center/viewAlert.x?alertId=22016 Patch
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtml PatchVendor Advisory
http://www.coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabilities Patch
http://www.securityfocus.com/archive/1/516095/100/0/threaded
http://www.securityfocus.com/bid/46075
http://www.vupen.com/english/advisories/2011/0261 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65076
http://securitytracker.com/id?1025015
http://tools.cisco.com/security/center/viewAlert.x?alertId=22016 Patch
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtml PatchVendor Advisory
http://www.coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabilities Patch
http://www.securityfocus.com/archive/1/516095/100/0/threaded
http://www.securityfocus.com/bid/46075
http://www.vupen.com/english/advisories/2011/0261 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65076

Track CVE-2010-3269 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2014-2135Cisco webex advanced recording format player memory buffer overflow vulnerabilityBuffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attack…EPSS 3.8%9.3CVE-2014-2136Cisco webex advanced recording format player memory buffer overflow vulnerabilityBuffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attack…EPSS 3.8%9.3CVE-2014-2133Cisco webex advanced recording format player memory buffer overflow vulnerabilityBuffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attack…EPSS 3.1%9.3CVE-2014-2134Cisco webex advanced recording format player memory buffer overflow vulnerabilityHeap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remot…EPSS 3.8%9.3CVE-2013-1115Cisco webex advanced recording format player memory buffer overflow vulnerabilityBuffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 al…EPSS 3.1%9.3CVE-2013-1116Cisco webex advanced recording format player memory buffer overflow vulnerabilityBuffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 al…EPSS 3.1%9.3CVE-2013-1117Cisco webex recording format player memory buffer overflow vulnerabilityBuffer overflow in the exception handler in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28…EPSS 3.1%9.3CVE-2013-1118Cisco webex recording format player memory buffer overflow vulnerabilityStack-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8…EPSS 3.2%

Source: NIST National Vulnerability Database (record CVE-2010-3269), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.