Lucene search

K
cve[email protected]CVE-2011-5003
HistoryDec 25, 2011 - 1:55 a.m.

CVE-2011-5003

2011-12-2501:55:03
CWE-119
web.nvd.nist.gov
19
cve-2011-5003
avid media composer
buffer overflow
remote code execution
security vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

Low

0.911 High

EPSS

Percentile

98.9%

Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659.

Affected configurations

NVD
Node
avidmedia_composerRange5.5.3

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

Low

0.911 High

EPSS

Percentile

98.9%