Do you WebEx?

If you use Webex at work – from your browser, which I’m sure you do…better pay attention.

Cisco just released a CRITICAL vulnerability alert that would allow someone to take control of your pc if they can get you to click on a meeting link that’s malicious.  Many vendors have people use Webex – many companies pay big money to use webex – so pay attention and go save yourself!

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170124-webex

Google Chrome
Cisco WebEx Extension for Google Chrome version 1.0.7 was released on January 26, 2017 and contains a fix for this vulnerability. Chrome users can ensure they are using the fixed version of the Cisco WebEx Extension for Google Chrome by doing the following:

1. In Chrome, open the Settings page.
2. Click Extensions.

The extension version is listed next to the Cisco WebEx Extension name.

Mozilla Firefox
Version 106 of the ActiveTouch General Plugin Container for Mozilla Firefox was released on January 28, 2017 and contains a fix for this vulnerability. Mozilla users can ensure they are using the fixed version of the ActiveTouch General Plugin Container for Mozilla by:

1. Clicking the menu button (three horizontal bars on the upper right of the application) and selecting Add-ons.
2. In the Add-ons Manager tab, click the Plugins panel
3. Locate the ActiveTouch General Plugin Container in the list of Plugins and click on the More link to obtain the version information

Microsoft Internet Explorer
Version 10031.6.2017.0127 of the GpcContainer Class for Microsoft Internet Explorer was released on January 28, 2017 and contains a fix for this vulnerability. Internet Explorer users can ensure they are using the fixed version of the GpcContainer Class for Internet Explorer by:

1. In Internet Explorer, select the Tools button
2. Select Manage add-ons
3. Select All add-ons from the Show drop-down menu
4. Select the GpcContainer Class add-on under Cisco WebEx LLC

The version number is displayed at the bottom of the Manage Add-ons window.

Fixed Releases

For the latest information about the following products, please consult the Cisco bug ID provided:

• Cisco WebEx Meeting Centers: CSCvc86959
• Cisco WebEx Meetings Server: CSCvc88194
• Cisco WebEx Meetings: CSCvc88535

Google Chrome
Cisco WebEx Extension for Google Chrome version 1.0.7 was released on January 26, 2017 and contains a fix for this vulnerability. Chrome users can ensure they are using the fixed version of the Cisco WebEx Extension for Google Chrome by doing the following:

1. In Chrome, open the Settings page.
2. Click Extensions.
3. Select the Developer mode checkbox.
4. Click Update extensions now.
5. Restart the Chrome browser.

Mozilla Firefox
Version 106 of the ActiveTouch General Plugin Container for Mozilla Firefox was released on January 28, 2017 and contains a fix for this vulnerability. Mozilla users can ensure they are using the fixed version of the ActiveTouch General Plugin Container for Mozilla by:

1. Clicking the menu button (three horizontal bars on the upper right of the application) and selecting Add-ons.
2. In the Add-ons Manager tab, click the Plugins panel
3. Locate the ActiveTouch General Plugin Container in the list of Plugins and click on the More link to obtain the version information

Microsoft Internet Explorer
Version 10031.6.2017.0127 of the GpcContainer Class for Microsoft Internet Explorer was released on January 28, 2017 and contains a fix for this vulnerability. Internet Explorer users can ensure they are using the fixed version of the GpcContainer Class for Internet Explorer by:

1. In Internet Explorer, select the Tools button
2. Select Manage add-ons
3. Select All add-ons from the Show drop-down menu
4. Select the GpcContainer Class add-on under Cisco WebEx LLC

The version number is displayed at the bottom of the Manage Add-ons window.

Current WebEx customers can confirm that their site has received updated software by reviewing the Application Version information found in the Support section of their WebEx page. To view this information, please perform the followings steps:

1. Sign into your WebEx account
2. Click the Meeting Center tab
3. Under Support, click Downloads

The Application Version is displayed on the right hand side of the screen under the About Meeting Center heading.