Cisco warns of new WebEx vulnerabilities

Cisco is warning users after the discovery of new vulnerabilities in its WebEx conferencing tool.

The company has issued an update to address multiple vulnerabilties in WebEx WRF Player, an archiving tool used to play back recorded audio from WebEx meetings. Cisco said that the tool should look for an update upon launch, but cautioned users to make sure that their systems were patched.

If targeted, the vulnerabilties could be exploited to allow an attacker to remotely install code on a targeted machine. The company said that older versions of the WRF Player for Windows, MacOS X and Linux were all vulnerable to attack, though users who update to the latest versions of the players will not be subject to the flaws. Cisco noted that users should update their software as a safety measure.

The company said that the vulnerabilities were disclosed to the company through a researcher at FortiNet labs, and thus far no attacks targeting the flaw have been spotted in the wild. Outside of the WRF Player, no other applications or components are believed to be vulnerable to attack.