CVE-2011-0058
Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2...
Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long string that triggers construction of a long text run.
Exploit likelihood
What each source reports
NVD Score used 10.0
Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long string that triggers construction of a long text run.
- Record
CVE-2011-0058- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long string that triggers construction of a long text run.
- Record
CVE-2011-0058- Updated
- 2026-11-02
EUVDEUVD-2011-0084No score
Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long string that triggers construction of a long text run.
- Record
EUVD-2011-0084- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m728-52w7-3gvfNo score
Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2...
Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long string that triggers construction of a long text run.
- Record
GHSA-m728-52w7-3gvf- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs | before 0:3.6.14-4.el4 | 0:3.6.14-4.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs | before 0:3.6.14-4.el4 | 0:3.6.14-4.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs | before 0:3.6.14-4.el4 | 0:3.6.14-4.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs | before 0:3.6.14-4.el4 | 0:3.6.14-4.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs | before 0:3.6.14-4.el4 | 0:3.6.14-4.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs | before 0:3.6.14-4.el4 | 0:3.6.14-4.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs | before 0:3.6.14-4.el4 | 0:3.6.14-4.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs | before 0:3.6.14-4.el4 | 0:3.6.14-4.el4 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs | before 0:3.6.14-4.el5_6 | 0:3.6.14-4.el5_6 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs | before 0:3.6.14-4.el5_6 | 0:3.6.14-4.el5_6 |
Show 23 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs | before 0:1.9.2.14-4.el5_6 | 0:1.9.2.14-4.el5_6 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs | before 0:1.9.2.14-4.el5_6 | 0:1.9.2.14-4.el5_6 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs | before 0:1.9.2.14-4.el5_6 | 0:1.9.2.14-4.el5_6 |
xulrunnerRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs | before 0:1.9.2.14-3.el6_0 | 0:1.9.2.14-3.el6_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs | before 0:1.9.2.14-3.el6_0 | 0:1.9.2.14-3.el6_0 |
xulrunner-develRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs | before 0:1.9.2.14-3.el6_0 | 0:1.9.2.14-3.el6_0 |
firefoxRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs | before 0:3.6.14-4.el6_0 | 0:3.6.14-4.el6_0 |
firefox-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs | before 0:3.6.14-4.el6_0 | 0:3.6.14-4.el6_0 |
firefoxRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs | before 0:3.6.14-4.el6_0 | 0:3.6.14-4.el6_0 |
firefox-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs | before 0:3.6.14-4.el6_0 | 0:3.6.14-4.el6_0 |
xulrunnerRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs | before 0:1.9.2.14-3.el6_0 | 0:1.9.2.14-3.el6_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs | before 0:1.9.2.14-3.el6_0 | 0:1.9.2.14-3.el6_0 |
xulrunner-develRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs | before 0:1.9.2.14-3.el6_0 | 0:1.9.2.14-3.el6_0 |
xulrunnerRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:1.9.2.14-3.el6_0 | 0:1.9.2.14-3.el6_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:1.9.2.14-3.el6_0 | 0:1.9.2.14-3.el6_0 |
xulrunner-develRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:1.9.2.14-3.el6_0 | 0:1.9.2.14-3.el6_0 |
firefoxRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:3.6.14-4.el6_0 | 0:3.6.14-4.el6_0 |
firefox-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:3.6.14-4.el6_0 | 0:3.6.14-4.el6_0 |
xulrunnerRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs | before 0:1.9.2.14-3.el6_0 | 0:1.9.2.14-3.el6_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs | before 0:1.9.2.14-3.el6_0 | 0:1.9.2.14-3.el6_0 |
xulrunner-develRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs | before 0:1.9.2.14-3.el6_0 | 0:1.9.2.14-3.el6_0 |
firefoxRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs | before 0:3.6.14-4.el6_0 | 0:3.6.14-4.el6_0 |
firefox-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs | before 0:3.6.14-4.el6_0 | 0:3.6.14-4.el6_0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-0058 is a high vulnerability (CVSS 10.0) in Mozilla Firefox, published March 2, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.50%, the 92nd percentile. No source names a fixed version.
References
downloads.avaya.com/css/P8/documents/100133195
securityfocus.com/bid/46660
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14254
bugzilla.mozilla.org/show_bug.cgi?id=607160
mandriva.com/security/advisories?name=MDVSA-2011:041
mozilla.org/security/announce/2011/mfsa2011-07.html
Show 51 moreShow less
nvd.nist.gov/vuln/detail/CVE-2011-0058
github.com/advisories/GHSA-m728-52w7-3gvf
access.redhat.com/errata/RHSA-2011:0310
access.redhat.com/security/updates/classification
mozilla.org/security/known-vulnerabilities/firefox36.html
bugzilla.redhat.com/show_bug.cgi?id=463131
bugzilla.redhat.com/show_bug.cgi?id=665031
bugzilla.redhat.com/show_bug.cgi?id=675082
bugzilla.redhat.com/show_bug.cgi?id=675083
bugzilla.redhat.com/show_bug.cgi?id=675087
bugzilla.redhat.com/show_bug.cgi?id=675090
bugzilla.redhat.com/show_bug.cgi?id=675091
bugzilla.redhat.com/show_bug.cgi?id=675092
bugzilla.redhat.com/show_bug.cgi?id=675093
bugzilla.redhat.com/show_bug.cgi?id=675094
bugzilla.redhat.com/show_bug.cgi?id=675095
bugzilla.redhat.com/show_bug.cgi?id=675143
bugzilla.redhat.com/show_bug.cgi?id=681369
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0310.json
access.redhat.com/security/cve/CVE-2010-1585
cve.org/CVERecord?id=CVE-2010-1585
nvd.nist.gov/vuln/detail/CVE-2010-1585
access.redhat.com/security/cve/CVE-2011-0051
cve.org/CVERecord?id=CVE-2011-0051
nvd.nist.gov/vuln/detail/CVE-2011-0051
access.redhat.com/security/cve/CVE-2011-0053
cve.org/CVERecord?id=CVE-2011-0053
nvd.nist.gov/vuln/detail/CVE-2011-0053
access.redhat.com/security/cve/CVE-2011-0054
cve.org/CVERecord?id=CVE-2011-0054
nvd.nist.gov/vuln/detail/CVE-2011-0054
access.redhat.com/security/cve/CVE-2011-0055
cve.org/CVERecord?id=CVE-2011-0055
nvd.nist.gov/vuln/detail/CVE-2011-0055
access.redhat.com/security/cve/CVE-2011-0056
cve.org/CVERecord?id=CVE-2011-0056
nvd.nist.gov/vuln/detail/CVE-2011-0056
access.redhat.com/security/cve/CVE-2011-0057
cve.org/CVERecord?id=CVE-2011-0057
nvd.nist.gov/vuln/detail/CVE-2011-0057
access.redhat.com/security/cve/CVE-2011-0058
cve.org/CVERecord?id=CVE-2011-0058
access.redhat.com/security/cve/CVE-2011-0059
cve.org/CVERecord?id=CVE-2011-0059
nvd.nist.gov/vuln/detail/CVE-2011-0059
access.redhat.com/security/cve/CVE-2011-0061
cve.org/CVERecord?id=CVE-2011-0061
nvd.nist.gov/vuln/detail/CVE-2011-0061
access.redhat.com/security/cve/CVE-2011-0062
cve.org/CVERecord?id=CVE-2011-0062
nvd.nist.gov/vuln/detail/CVE-2011-0062