CVE-2011-5096

no score yetEPSS 3.9%

Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (formerly Nortel Media Application Server) 1.x before 1.0.2 and 2.0 before Patch Bundle 10 allows remote attackers to execute arbitrary code via a crafted cs_anams parameter in a CONTENT_STORE_ADMIN_REQ packet.

EPSS: 3.9% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2012-07-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

avaya:aura_application_server_5300

References

http://zerodayinitiative.com/advisories/ZDI-11-260/
https://downloads.avaya.com/css/P8/documents/100146108
http://zerodayinitiative.com/advisories/ZDI-11-260/
https://downloads.avaya.com/css/P8/documents/100146108

Check your stack JSON