CVE-2003-1110

CVE-2003-1110 describes a critical vulnerability in the Session Initiation Protocol (SIP) implementation of Columbia SIP User Agent (sipc) versions prior to 2.0 build 2003-02-21. Remote attackers can exploit this flaw by sending specially crafted INVITE messages, leading to a denial of service or arbitrary code execution. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation, readily available exploit code, or KEV listing, the vulnerability has garnered significant community discussion with 10 mentions, indicating notable attention despite a lack of media coverage.