CVE-2007-0918

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-02-14 · updated 2026-06-16

Description

The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service (IPS crash and traffic loss) via unspecified manipulations that are not properly handled by the regular expression feature, as demonstrated using the 3123.0 (Netbus Pro Traffic) signature.

Affected products

Cisco IOS: 12.3t, 12.3xq, 12.3xr, 12.3xs, 12.3xw, 12.3xx (+19)

References

http://osvdb.org/33053
http://secunia.com/advisories/24142
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e0a5b.shtml
http://www.cisco.com/en/US/products/products_security_response09186a00807e0a5e.html
http://www.securityfocus.com/bid/22549
http://www.securitytracker.com/id?1017631
http://www.vupen.com/english/advisories/2007/0597
https://exchange.xforce.ibmcloud.com/vulnerabilities/32474
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5832
http://osvdb.org/33053
http://secunia.com/advisories/24142
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e0a5b.shtml

Get alerted when CVE-2007-0918 or the next vulnerability affects your stack