CVE-2010-3269: Cisco Webex Advanced Recording Format Player

High severity, CVSS 9.3. EPSS: 11.4% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to execute arbitrary code via a crafted (1) .wrf or (2) .arf file, related to use of a function pointer in a callback mechanism.

Affected products

  • Cisco Webex Advanced Recording Format Player: version 26.49 only; version 27.10 only; version 27.11.0.3328 only; version 27.12 only; version 27.13 only
  • Cisco Webex Recording Format Player: version 26.49 only; version 27.10 only; version 27.11.0.3328 only; version 27.12 only; version 27.13 only

Published 2011-02-02. Last modified 2026-06-16.