Cisco Webex Meeting Manager atucfobj ActiveX Control Buffer Overflow

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: HIGH

  CVE Identifier: CVE-2008-3558

  Advisory Date: JUL 21, 2015

---

  DESCRIPTION

Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long argument to the NewObject method.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1002690

  Trend Micro Deep Security DPI Rule Name: 1002690 - Cisco Webex Meeting Manager atucfobj ActiveX Control Buffer Overflow

  AFFECTED SOFTWARE AND VERSION

• cisco webex_meeting_manager 20.2008.2601.4928