Cisco IOS after 12.3(14)T 12.3(8)YC1 12.3(8)YG and 12.4 with voice support and without Session Initiated Protocol (SIP) configured allows remote attackers to cause a denial of service (crash) by sending a crafted packet to port 5060/UDP.