CVE:CVE-2018-0379
CNNVD:CNNVD-201807-1295
Cisco Webex Meetings Suite sites、Webex Meetings Online sites和Webex Meetings Server都是美国思科（Cisco）公司的多功能视频会议解决方案。Webex Network Recording Player for Advanced Recording Format（ARF）和Webex Recording Format（WRF）是其中的一个主要用于播放ARF和WRF格式的WebEx录制文件的媒体播放器。
Cisco Webex Network Recording Player for ARF和WRF文件中存在资源管理错误漏洞。攻击者可借助邮件或URL向用户提供恶意的.arf或.wrf文件并诱使用户启用该文件利用该漏洞在目标用户的系统上执行任意代码。以下产品受到影响：Cisco Webex Meetings Suite sites；Cisco Webex Meetings Online sites；Cisco Webex Meetings Server。
solution:Upgrade cisco webex_meetings_online to a higher version than 1.3.35,1.3.35,and avoid the version (,1.3.35),1.3.35; Upgrade cisco webex_business_suite to a higher version than 31.23,32.15,33.2,31.23,32.15,33.0.6,33.1.1,33.2,and avoid the version [31.0,31.23],[32.0,32.15),[33.0,33.2],31.23,32.15,33.0.6,33.1.1,33.2; Upgrade cisco webex_meeting_server to a higher version than 3.0:mr1,and avoid the version 3.0:mr1