CVE-2004-0054

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-02-17 · updated 2026-06-16

Description

Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

Affected products

Cisco IOS: 11.3t, 12.0, 12.0s, 12.0t, 12.1, 12.1e (+4)

References

http://www.cert.org/advisories/CA-2004-01.html
http://www.cisco.com/warp/public/707/cisco-sa-20040113-h323.shtml
http://www.kb.cert.org/vuls/id/749342
http://www.securityfocus.com/bid/9406
http://www.securitytracker.com/id?1008685
http://www.uniras.gov.uk/vuls/2004/006489/h323.htm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4884
http://www.cert.org/advisories/CA-2004-01.html
http://www.cisco.com/warp/public/707/cisco-sa-20040113-h323.shtml
http://www.kb.cert.org/vuls/id/749342
http://www.securityfocus.com/bid/9406
http://www.securitytracker.com/id?1008685

Get alerted when CVE-2004-0054 or the next vulnerability affects your stack