Stack-based Buffer Overflow in Avid Media Composer Products
CVE-2011-5003

Currently unrated

Key Information:

Vendor

Avid

Status
Media Composer
Vendor
CVE Published:
25 December 2011

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 76%

What is CVE-2011-5003?

A stack-based buffer overflow vulnerability exists in the Phonetic Indexer (AvidPhoneticIndexer.exe) of Avid Media Composer versions 5.5.3 and earlier. This vulnerability allows remote attackers to send specially crafted requests to TCP port 4659, potentially leading to arbitrary code execution on the affected system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2011-5003 - Proof of Concept

References

http://www.exploit-db.com/exploits/18183
exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/77376
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/50843
vdb-entryx_refsource_BID

EPSS Score

76% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

JSON
.