Cisco warns of new WebEx vulnerabilities

The Cisco flaws could lead to remote code execution

Cisco has issued a security advisory after the discovery of new vulnerabilities in its WebEx conferencing tool.

The company has issued an update to address multiple flaws in WebEx WRF Player, an archiving tool used to play back recorded audio from WebEx meetings.

Cisco said that the tool should look for an update on launching, but warned users to make sure that their systems are patched.

The vulnerabilties could be exploited to allow an attacker to remotely install code on a targeted machine.

The company said that older versions of the WRF Player for Windows, Mac OS X and Linux are all vulnerable to attack, although users who update to the latest versions of the players will not be subject to the flaws. Cisco said that users should update their software as a safety measure.

The flaws were uncovered by a researcher at FortiNet labs, and no attacks have yet been spotted in the wild. No other applications or components are believed to be vulnerable to attack.