Description
Cisco IOS 12.0 to 12.4 might allow remote attackers to execute arbitrary code via a heap-based buffer overflow in system timers. NOTE: this issue does not correspond to a specific vulnerability, rather a general weakness that only increases the feasibility of exploitation of any vulnerabilities that might exist. Such design-level weaknesses normally are not included in CVE, so perhaps this issue should be REJECTed.
References
- VU#562945 third-party-advisory
- 17413 third-party-advisory
- oval:org.mitre.oval:def:4914 vdb-entry signature
- ADV-2005-2282 vdb-entry
- 15275 vdb-entry
- 1015139 vdb-entry
- 20051102 IOS Heap-based Overflow Vulnerability in System Timers vendor-advisory