NVD

Id
69142  
Name
CVE-2005-3481  
Description
Cisco IOS 12.0 to 12.4 might allow remote attackers to execute arbitrary code via a heap-based buffer overflow in system timers. NOTE: this issue does not correspond to a specific vulnerability, rather a general weakness that only increases the feasibility of exploitation of any vulnerabilities that might exist. Such design-level weaknesses normally are not included in CVE, so perhaps this issue should be REJECTed.  
Reject
1  
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2005-11-02  
Modified Date
2011-03-07  
Seq
2005-3481  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
357434 69142 CVE-2005-3481 oval:org.mitre.oval:def:4914  View
357435 69142 CVE-2005-3481 1015139  View
357436 69142 CVE-2005-3481 20051102 IOS Heap-based Overflow Vulnerability in System Timers  View
357437 69142 CVE-2005-3481 VU#562945  View
357438 69142 CVE-2005-3481 15275  View
357439 69142 CVE-2005-3481 ADV-2005-2282  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62619 JVNDB-2005-000853 Cisco IOS に heap integrity checks を迂回される脆弱性 Cisco IOS には、ヒープオーバーフローが起きた場合に備えてヒープメモリの内容の一貫性を検査する機能（heap integrity check）が組み込まれていますが、この heap integrity check を迂回して任意のコードを実行可能な脆弱性が存在します。 CVE-2005-3481 14685 CVE-2005-3481 69142 9.3 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000853.html 2005-11-04 2008-11-21 View