CVE:CVE-2020-3194
CNNVD:CNNVD-202004-1104
Cisco Webex Network Webex Player是美国思科（Cisco）公司的一款用于播放视频会议记录的播放器。
Cisco Webex Network Recording Player和Webex Player中存在输入验证错误漏洞。攻击者可通过诱使用户使用受影响的软件打开恶意的ARF或WRF文件利用该漏洞以目标用户权限在受影响系统上执行任意代码。
solution:Upgrade cisco webex_network_recording_player to a higher version than 40.2,39.5.18,and avoid the version (,40.2),(,39.5.18); Upgrade cisco webex_meetings to a higher version than 39.5.18,and avoid the version [39.5,39.5.18); Upgrade cisco webex_meetings_online to a higher version than 1.3.48,and avoid the version (,1.3.48); Upgrade cisco webex_meetings_server to a higher version than 4.0,4.0,4.0:maintenance_release1,4.0:maintenance_release2,and avoid the version (,4.0),4.0,4.0:maintenance_release1,4.0:maintenance_release2