critical10.0Public exploit code
CVE-2011-5003
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbit…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AVID Media Composer Phonetic Indexer - Remote Stack Buffer Overflow (Metasploit)2011-12-01 · remote · windows · Verified
Impact
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avid | Media Composer | through 5.5.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/47047
- http://www.exploit-db.com/exploits/18183
- http://www.osvdb.org/77376
- http://www.security-assessment.com/files/documents/advisory/Avid_Media_Composer-Phonetic_Indexer-Remote_Stack_Buffer_Overflow.pdf
- http://www.securityfocus.com/bid/50843
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71514
- http://secunia.com/advisories/47047
- http://www.exploit-db.com/exploits/18183
- http://www.osvdb.org/77376
- http://www.security-assessment.com/files/documents/advisory/Avid_Media_Composer-Phonetic_Indexer-Remote_Stack_Buffer_Overflow.pdf
- http://www.securityfocus.com/bid/50843
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71514