CVE-2007-4295 — Code Injection in Cisco IOS

Vendor	Product	Version range	Fixed in
cisco	ios	—	—
cisco	ios	—	—
cisco	ios	—	—
cisco	ios	—	—
cisco	ios	—	—
cisco	ios_and_cisco_unified_communications_manager	—	—

GHSA

GHSA-vf5q-3rgp-67xj: Unspecified vulnerability in Cisco IOS 12

ghsa_unreviewed·2022-05-01

CVE-2007-4295 [MEDIUM] GHSA-vf5q-3rgp-67xj: Unspecified vulnerability in Cisco IOS 12 Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80749.

Cisco

Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager

vendor_cisco·2007-08-08·CVSS 10.0

CVE-2007-4291 [CRITICAL] CWE-399 Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features: Session Initiation Protocol (SIP) Media Gateway Control Protocol (MGCP) Signaling protocols H.323, H.254 Real-time Transport Protocol (RTP) Facsimile reception Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory. There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from

Cisco

Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager

vendor_cisco

CVE-2007-4295 Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager CVE-2007-4295: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features: Session Initiation Protocol (SIP) Media Gateway Control Protocol (MGCP) Signaling protocols H.323, H.254 Real-time Transport Protocol (RTP) Facsimile reception Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory. There are no CWE: CWE-399, CWE-94, CWE-399, CWE-94 Bug IDs: CSCeb21064, CSCsb24007, CSCsc6024

CVE-2007-4295: Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80749.

Affected