CVE-2003-1109

CVE-2003-1109 describes a denial-of-service vulnerability, potentially leading to arbitrary code execution, in the Session Initiation Protocol (SIP) implementation across various Cisco products, including IP Phone models 7940/7960, specific IOS versions, and Secure PIX firewall software. This vulnerability is triggered by crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite. With a CVSS score of 7.5, it represents a high-severity risk, allowing unauthenticated remote attackers to exploit it with low attack complexity, potentially impacting confidentiality, integrity, and availability. While the FAUCET Risk Score is high at 86/100, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.