Cisco Webex Wrf Player t29 vulnerabilities

2 CVEs affecting Cisco Webex Wrf Player t29, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-1464, published 2016-09-03.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-1464, published 2016-09-03. High severity, CVSS 7.8. EPSS: 10% chance of exploitation in the next 30 days. Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, aka Bug ID CSCva09375.
• CVE-2016-1415, published 2016-09-03. Medium severity, CVSS 5.5. EPSS: 5.6% chance of exploitation in the next 30 days. Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted file, aka Bug ID CSCuz80455.