CVE-2011-5003
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media...
CVE-2011-5003 is a high vulnerability (CVSS 10.0) in Avid Media Composer, published December 25, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 62.4%, the 99th percentile. No source names a fixed version.
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659.
- Record
CVE-2011-5003- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659.
- Record
CVE-2011-5003- Updated
- 2026-11-02
EUVDEUVD-2011-4908 No score
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659.
- Record
EUVD-2011-4908- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mxg3-5hmw-28wr No score
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media...
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659.
- Record
GHSA-mxg3-5hmw-28wr- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | AVID Media Composer Phonetic Indexer - Remote Stack Buffer Overflow (Metasploit) | 2011-12-01 |
| Metasploit | Avid Media Composer 5.5 - Avid Phonetic Indexer Buffer Overflow | 2011-11-29 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
References
exploit-db.com/exploits/18183
osvdb.org/77376
securityfocus.com/bid/50843
exchange.xforce.ibmcloud.com/vulnerabilities/71514
secunia.com/advisories/47047
security-assessment.com/files/documents/advisory/Avid_Media_Composer-Phonetic_Indexer-Remote_Stack_Buffer_Overflow.pdf
nvd.nist.gov/vuln/detail/CVE-2011-5003
github.com/advisories/GHSA-mxg3-5hmw-28wr