What’s Vulnerable › Vulnerabilities

CVE-2011-5096

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-07-03 · updated 2026-06-16
• Weakness: CWE-119

Description

Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (formerly Nortel Media Application Server) 1.x before 1.0.2 and 2.0 before Patch Bundle 10 allows remote attackers to execute arbitrary code via a crafted cs_anams parameter in a CONTENT_STORE_ADMIN_REQ packet.

Affected products

• Avaya Aura Application Server 5300: 1.0, 2.0

References

• http://zerodayinitiative.com/advisories/ZDI-11-260/
• https://downloads.avaya.com/css/P8/documents/100146108
• http://zerodayinitiative.com/advisories/ZDI-11-260/
• https://downloads.avaya.com/css/P8/documents/100146108

Get alerted when CVE-2011-5096 or the next vulnerability affects your stack