CVE-2014-2134: Heap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T28 before...

Security readout for executives and security teams

A malicious WebEx WRF recording file could compromise or crash a user’s computer when opened with vulnerable Cisco WebEx recording player versions. The issue is in the file parser, so exposure is mainly where users can receive and open untrusted .wrf files. Organizations are most exposed on endpoints with older Cisco WebEx WRF players installed, especially where users open archived, emailed, or downloaded .wrf recordings from untrusted sources. Prioritize remediation if legacy WebEx recording playback is still present. The business risk is endpoint compromise through user-opened files, not broad network exposure, but arbitrary code execution makes outdated installations unsuitable for normal use. Mitigation focus: Upgrade affected Cisco WebEx WRF players to the fixed versions named by Cisco.; Remove legacy WebEx recording players where they are no longer required.; Block or quarantine unsolicited .wrf files at email and web gateways..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.