CVE-2008-3558

CRITICAL 9.3CVE-2008-3558 · Published 08/08/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
webex meeting manager cisco	`= 20.2008.2601.4928`	No fix yet

Description

Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long argument to the NewObject method.

References

lists.grok.org.uk/pipermail/full-disclosure/2008-August/063692.html
secunia.com/advisories/31397 · Vendor Advisory
cisco.com/en/US/products/products_security_advisory09186a00809e2006.shtml · Vendor Advisory
kb.cert.org/vuls/id/661827 · US Government Resource
securityfocus.com/bid/30578
securitytracker.com/id
vupen.com/english/advisories/2008/2319 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/44250
exploit-db.com/exploits/6220

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free