NetSight
IP …
medium6.8

CVE-2011-3947

Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x …

Impact

Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MJPEG-B file.

Affected products

VendorProductAffected versions
FfmpegFfmpeg
Versions 0.7.1, 0.7.2, 0.7.6, 0.7.7, 0.7.8, 0.7.9
LibavLibav
Versions 0.5, 0.5.1, 0.5.2, 0.5.3, 0.5.4, 0.5.5

Weakness classification

CWE-119

References