Cisco warns of WebEx ActiveX security hole

Cisco is warning of a buffer overflow flaw in an ActiveX control used by the WebEx Meeting Manager. If exploited, hackers could  execute arbitrary code on the user client machine. The WebEx Meeting Manager is a client-side program that is provided by the Cisco WebEx meeting service, which automatically downloads, installs, and configures Meeting Manager the first time a user begins or joins a meeting. Workarounds to the problem is available at Cisco, which said WebEx is in the process of upgrading the meeting service infrastructure with fixed versions of the affected file.

More Cisco security responses

More Cisco security advisories

More from Cisco Subnet: 
* Is a rosy future in the forecast for sitting CCIEs?
* Out goes Cisco, in comes ShoreTel VoIP for the City of Oakland
* Highest base salary so far recorded for CCIE is $262K
* Is AT&T cutting CCIE pay by 33% or more?
* How phishers think, act and make a profit
* In depth series: Cisco Unified Cmmunications Manager call routing
Go to Cisco Subnet for more Cisco news, blogs, discussion forums, security alerts, book giveaways, and more.