CVE-2011-3947

CVE-2011-3947 describes a buffer overflow vulnerability in the mjpegbdec.c component of libavcodec, affecting FFmpeg versions 0.7.x and 0.8.x, and Libav versions 0.5.x, 0.6.x, 0.7.x, and 0.8.x. This flaw allows remote attackers to trigger a denial of service (crash) and potentially execute arbitrary code by processing a specially crafted MJPEG-B file. The vulnerability has a CVSS score of 6.8, indicating a medium severity, and can be exploited over a network with medium attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.