Cisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to cause a denial of service or execute arbitrary code via a crafted IP option in the IP header in a (1) ICMP, (2) PIMv2, (3) PGM, or (4) URD packet.
Metrics
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Complete
Integrity Impact Complete
Availability Impact Complete
AV:N/AC:L/Au:N/C:C/I:C/A:C
This CVE is not in the KEV list.
Key SSVC decision points have not yet been added.
Affected Vendors & Products
Vendors | Products |
---|---|
Cisco |
|
Configuration 1 [-]
|
No data.
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2007-01-25T00:00:00
Updated: 2024-08-07T12:19:30.454Z
Reserved: 2007-01-24T00:00:00
Link: CVE-2007-0480

No data.

Status : Deferred
Published: 2007-01-25T00:28:00.000
Modified: 2025-04-09T00:30:58.490
Link: CVE-2007-0480

No data.