Cisco WebEx Browser Extension Vulnerability
MSU WebEx Video Conference Users,
A severe vulnerability was recently discovered in the browser extension for Cisco’s WebEx video conferencing software on Windows computers. Cisco has now released software updates that address this vulnerability.
To protect yourself, follow the instructions below to update the WebEx extension on any browser you may have used to attend or host a WebEx meeting. If you have never used WebEx then you will not need to update the extension. Again, this vulnerability only affects Windows computers (PCs).
The update instructions are also available at http://www.montana.edu/itcenter/documents/WebexUpdateInstructions.pdf
Internet Explorer - update add-on to latest version
IMPORTANT: The registered name of the add-on in Internet Explorer may differ depending on method of installation. You will see either Download Manager or GpcContainer Class.
To check the version installed:
- In Internet Explorer, open the settings menu by clicking the gear icon in upper-right corner.
- Click Manage Add-ons.
- Select All add-ons, from the Show drop-down menu (in left panel).
- Locate the Cisco WebEx LLC section and click on the add-on listed. It will be either Download Manager or GpcContainer Class.
- Validate that whichever add-on you have is as shown below:
Download Manager is version 10031.6.2017.0126 or later,
GpcContainer Class is version 10030.100.2017.0127 or later.
- In IE, go to https://montana.webex.com and log in.
- Click Start Meeting in your personal room. Doing so should automatically update to the correct version.
- To verify, go back to Manage Add-ons and check that the version of whichever of these add-ons you have installed is as shown:
• Download Manager - version 10031.6.2017.0126 or later
• GpcContainer Class - version 10030.100.2017.0127 or later
Firefox - update ActiveTouch General Plugin Container to version 106, or later
To check the version of the ActiveTouch General Plugin Container:
- In Firefox, click the 3 vertical lines menu bar icon in upper-right corner of browser and select Add-ons.
- Click Plugins in left side panel.
- Check that the ActiveTouch General Plugin Container is version is 106, or later.
- Open Firefox and log into to WebEx at https://montana.webex.com.
- Click Start Meeting in your personal room (or click home tab then click Start Meeting).
- Click download add-on and follow prompts to install.
- After your meeting starts you can end it.
- Repeat the steps above to check that the version of plugin is now 106 (or later).
Chrome – update Cisco WebEx Extension to latest version
To ensure the correct version is installed:
- In Chrome, open the Settings page
by clicking the more icon (3 vertical dots or green up arrow), in upper-right corner and selecting Settings).
- Click Extensions in the left side navigation panel.
- Check the Developer mode checkbox located near the top of the page across from the Extensions heading.
- Click the Update extensions now button.
- Validate that the Cisco WebEx Extension is version is 1.0.8, or later.
Please direct questions to the ITC Service Desk at 994-1777 or email@example.com.
The Information Technology Center
To see a list of all ITC communications, please visit www.montana.edu/itcenter/notices/.