CVEvulnerability
CVE-2011-3947
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-08-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MJPEG-B file.
Affected configurations
• ffmpeg ffmpeg 0.7.1
• ffmpeg ffmpeg 0.7.2
• ffmpeg ffmpeg 0.7.6
• ffmpeg ffmpeg 0.7.7
• ffmpeg ffmpeg 0.7.8
• ffmpeg ffmpeg 0.7.9
• ffmpeg ffmpeg 0.7.11
• ffmpeg ffmpeg 0.8.5
• ffmpeg ffmpeg 0.8.6
• ffmpeg ffmpeg 0.8.7
• ffmpeg ffmpeg 0.8.8
• ffmpeg ffmpeg 0.8.10
• libav libav 0.5
• libav libav 0.5.1
• libav libav 0.5.2
• libav libav 0.5.3
• libav libav 0.5.4
• libav libav 0.5.5
• libav libav 0.5.6
• libav libav 0.5.7
• libav libav 0.6
• libav libav 0.6.1
• libav libav 0.6.2
• libav libav 0.6.3
• libav libav 0.6.4
• libav libav 0.6.5
• libav libav 0.7
• libav libav 0.7.1
• libav libav 0.7.2
• libav libav 0.7.3
• libav libav 0.7.4
• libav libav 0.8
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://ffmpeg.org/ ffmpeg.org
- http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=b57d262412204e54a7ef8fa1b23ff4dcede622e5 git.libav.org
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=b57d262412204e54a7ef8fa1b23ff4dcede622e5 git.videolan.org
- http://libav.org/ libav.org
- http://secunia.com/advisories/49089 secunia.com
- http://www.debian.org/security/2012/dsa-2471 www.debian.org
- http://www.ubuntu.com/usn/USN-1479-1 www.ubuntu.com
- http://ffmpeg.org/ ffmpeg.org
- http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=b57d262412204e54a7ef8fa1b23ff4dcede622e5 git.libav.org
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=b57d262412204e54a7ef8fa1b23ff4dcede622e5 git.videolan.org
- http://libav.org/ libav.org
- http://secunia.com/advisories/49089 secunia.com
- http://www.debian.org/security/2012/dsa-2471 www.debian.org
- http://www.ubuntu.com/usn/USN-1479-1 www.ubuntu.com