CVE-2010-0581

Cisco IOS 12.3-12.4 - Remote Code Execution via Malformed SIP Message

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute arbitrary code via a malformed SIP message, aka Bug ID CSCsz89904, the "SIP Packet Parsing Arbitrary Code Execution Vulnerability."

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1023744
Patch, Vendor Advisory x_refsource_confirm
http://tools.cisco.com/security/center/viewAlert.x?alertId=20065
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39068
Patch, Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f32.shtml

Scores

EPSS 0.0520
EPSS Percentile 91.6%

Details

Status published
Products (44)
cisco/ios 12.3jk
cisco/ios 12.3t
cisco/ios 12.3xd
cisco/ios 12.3xf
cisco/ios 12.3xg
cisco/ios 12.3xi
cisco/ios 12.3xj
cisco/ios 12.3xk
cisco/ios 12.3xl
cisco/ios 12.3xq
... and 34 more
Published Mar 25, 2010
Tracked Since Feb 18, 2026