CVE-2009-2877: Cisco Webex

High severity, CVSS 9.3. EPSS: 5.1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in ataudio.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x (aka T27SP10) for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted WebEx Recording Format (WRF) file.

Affected products

• Cisco Webex: version 26.00 only; version 27.00 only

Published 2009-12-18. Last modified 2026-06-16.