Executive Summary

Informations
Name CVE-2007-4291 First vendor Publication 2007-08-09
Vendor Cve Last vendor Modification 2017-09-29

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:N/A:C)
Cvss Base Score 7.1 Attack Range Network
Cvss Impact Score 6.9 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via (1) a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by (2) CSCsi60004 with Proxy Unregistration and (3) CSCsg70474; and a malformed Real-time Transport Protocol (RTP) packet, which causes a device crash, as identified by (4) CSCse68138, related to VOIP RTP Lib, and (5) CSCse05642, related to I/O memory corruption.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4291

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:5570
 
Oval ID: oval:org.mitre.oval:def:5570
Title: Cisco IOS H.323 Packet DoS Vulnerability, Media Gateway Control Protocol Packet DoS Vulnerability and Real-time Transport Protocol Packet DoS Vulnerability
Description: Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via (1) a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by (2) CSCsi60004 with Proxy Unregistration and (3) CSCsg70474; and a malformed Real-time Transport Protocol (RTP) packet, which causes a device crash, as identified by (4) CSCse68138, related to VOIP RTP Lib, and (5) CSCse05642, related to I/O memory corruption.
Family: ios Class: vulnerability
Reference(s): CVE-2007-4291
 Version: 1
Platform(s): Cisco IOS
 Product(s):
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Os 5

Open Source Vulnerability Database (OSVDB)

Id Description
36681 Cisco IOS I/O Memory Corruption Unspecified DoS
36680 Cisco IOS VOIP RTP Lib Unspecified DoS
36679 Cisco IOS malformed Real-time Transport Protocol (RTP) Packet Remote DoS
36678 Cisco IOS Proxy Unregistration Malformed H.323 Packet Remote DoS
36677 Cisco IOS Malformed MGCP Packet Remote DoS

Nessus® Vulnerability Scanner

Date Description
2010-09-01 Name : The remote device is missing a vendor-supplied security patch.
File : cisco-sa-20070808-IOS-voice.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/25239
CISCO http://www.cisco.com/en/US/products/products_security_advisory09186a008089965...
OSVDB http://osvdb.org/36677
http://osvdb.org/36678
http://osvdb.org/36679
http://osvdb.org/36680
http://osvdb.org/36681
OVAL https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
SECTRACK http://securitytracker.com/id?1018533
SECUNIA http://secunia.com/advisories/26363
VUPEN http://www.vupen.com/english/advisories/2007/2816
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/35903
https://exchange.xforce.ibmcloud.com/vulnerabilities/35904
https://exchange.xforce.ibmcloud.com/vulnerabilities/35905

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
Date Informations
2021-05-04 12:06:15
  • Multiple Updates
2021-04-22 01:06:47
  • Multiple Updates
2020-05-23 00:20:16
  • Multiple Updates
2017-09-29 09:23:10
  • Multiple Updates
2017-07-29 12:02:27
  • Multiple Updates
2016-06-28 16:49:30
  • Multiple Updates
2016-04-26 16:28:47
  • Multiple Updates
2014-02-17 10:41:18
  • Multiple Updates
2013-05-11 10:33:48
  • Multiple Updates