Description
Cisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to cause a denial of service or execute arbitrary code via a crafted IP option in the IP header in a (1) ICMP, (2) PIMv2, (3) PGM, or (4) URD packet.
References
- 23867 third-party-advisory
- 1017555 vdb-entry
- oval:org.mitre.oval:def:5666 vdb-entry signature
- TA07-024A third-party-advisory
- VU#341288 third-party-advisory
- ADV-2007-0329 vdb-entry
- cisco-ip-option-code-execution(31725) vdb-entry
- 22211 vdb-entry
- 32092 vdb-entry
- 20070124 Crafted IP Option Vulnerability vendor-advisory