This script is Copyright (C) 2017 Tenable Network Security, Inc.
A browser extension installed on the remote host is affected by a
remote code execution vulnerability.
The Cisco WebEx Extension for Firefox installed on the remote host is
a version prior to 1.0.12. It is, therefore, affected by a remote code
execution vulnerability in the 'atgpcext' library due to incomplete
GPC sanitization. An unauthenticated, remote attacker can exploit
this, by convincing a user to visit a specially crafted website, to
execute arbitrary code with the privileges of the affected browser.
See also :
Upgrade to Cisco WebEx Extension for Firefox version 1.0.12 or later.
Risk factor :
High / CVSS Base Score : 9.3
CVSS Temporal Score : 7.7
Public Exploit Available : true