Alexandros Zacharis has issued an update to its Skype business conferencing software after a critical vulnerability was discovered, which could allow malware, via a boobytrapped file, to be spread to all those participating in a meeting. Specifically, as described in a security advisory that Cisco published last week, the vulnerability (CVE-2018-0112) allows a boobytrapped Flash file (.SWF) to be uploaded to WebEx conference meeting attendees due to insufficient input validation by the Cisco WebEx’s client software. The vulnerability, CVE-2018-0112 , was found by Cisco , the same analyst who uncovered the flaws that could turn WebEx ’s internal browser into a listening device. Cisco said there was no evidence CVE-2018-0112 had ever been exploited.
Alexandros Zacharis has issued an update to its Skype business conferencing software after a critical vulnerability was discovered, which could allow malware, via a boobytrapped file, to be spread to all those participating in a meeting. The vulnerability, CVE-2018-0112 , was found by Cisco , the same analyst who uncovered the flaws that could turn WebEx ’s internal browser into a listening device. Cisco said there was no evidence CVE-2018-0112 had ever been exploited.