CVE-2011-3947Improper Restriction of Operations within the Bounds of a Memory Buffer in Ffmpeg

Severity
6.8MEDIUMNVD
EPSS
3.0%
top 13.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 20
Latest updateMay 17

Description

Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MJPEG-B file.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages4 packages

debiandebian/ffmpeg< ffmpeg 7:2.4.1-1 (bookworm)
Debianffmpeg/ffmpeg< 7:2.4.1-1+3
NVDlibav/libav20 versions+19
NVDffmpeg/ffmpeg12 versions+11

🔴Vulnerability Details

2
GHSA
GHSA-rq6w-rq9c-3jhv: Buffer overflow in mjpegbdec2022-05-17
OSV
CVE-2011-3947: Buffer overflow in mjpegbdec2012-08-20

📋Vendor Advisories

3
Ubuntu
FFmpeg vulnerabilities2012-06-18
Ubuntu
Libav vulnerabilities2012-06-18
Debian
CVE-2011-3947: ffmpeg - Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0...2011