CVE-2005-3481: Cisco IOS

High severity, CVSS 9.3. EPSS: 7.1% chance of exploitation in the next 30 days.

Cisco IOS 12.0 to 12.4 might allow remote attackers to execute arbitrary code via a heap-based buffer overflow in system timers. NOTE: this issue does not correspond to a specific vulnerability, rather a general weakness that only increases the feasibility of exploitation of any vulnerabilities that might exist. Such design-level weaknesses normally are not included in CVE, so perhaps this issue should be REJECTed.

Affected products

• Cisco IOS: version 12.0 only; version 12.0da only; version 12.0db only; version 12.0dc only; version 12.0s only; version 12.0sc only; …

Published 2005-11-03. Last modified 2026-06-16.