CVE-2011-5096

CWE-119 — Buffer Overflow3 documents3 sources
Severity
10.0CRITICAL
EPSS
9.6%
top 7.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Avaya Aura Application Server 5300
Timeline
PublishedJul 3
Latest updateMay 17

Description

Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (formerly Nortel Media Application Server) 1.x before 1.0.2 and 2.0 before Patch Bundle 10 allows remote attackers to execute arbitrary code via a crafted cs_anams parameter in a CONTENT_STORE_ADMIN_REQ packet.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDavaya/aura_application1.0, 2.0+1

🔴Vulnerability Details

2
GHSA
GHSA-4x44-c355-hw67: Stack-based buffer overflow in cstore↗2022-05-17
▶
CVEList
CVE-2011-5096: Stack-based buffer overflow in cstore↗2012-07-03
▶