CVE-2011-0058
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2011-0058
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long string that triggers construction of a long text run.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Mozilla Firefox和SeaMonkey文本运行构建内存破坏漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Firefox是一款非常流行的开源Web浏览器。SeaMonkey是开源的Web浏览器、邮件和新闻组客户端、IRC会话客户端和HTML编辑器。 Mozilla Firefox和SeaMonkey在实现上存在漏洞。将超长字符串插入到HTML文档时，浏览器会错误地构建用于显示文本的布局对象。在此情况下，在计算文本运行长度时会出现错误，为文本存储分配过少的内存缓冲区。攻击者可利用此漏洞在缓冲区最后写入恶意构造的数据来执行恶意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2011-0058
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2011-0058
Please Login to view more intelligence information
- http://www.mozilla.org/security/announce/2011/mfsa2011-07.htmlx_refsource_CONFIRM
- ASA-2011-093 (RHSA-2011-0310)x_refsource_CONFIRM
- https://bugzilla.mozilla.org/show_bug.cgi?id=607160x_refsource_CONFIRM
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14254vdb-entrysignaturex_refsource_OVAL
- https://nvd.nist.gov/vuln/detail/CVE-2011-0058
Same Patch Batch · n/a · 2011-03-02 · 16 CVEs total
| CVE-2010-4754 | 多个BSD系统glob实现内存破坏漏洞拒绝服务漏洞 | |
| CVE-2010-4755 | OpenSSH glob表达式拒绝服务漏洞 | |
| CVE-2010-4756 | GNU C Library glob实现拒绝服务漏洞 | |
| CVE-2011-0051 | Mozilla Firefox和SeaMonkey对话框问题响应漏洞 | |
| CVE-2011-0053 | Mozilla Firefox/Thunderbird/SeaMonkey浏览器引擎拒绝服务漏洞 | |
| CVE-2011-0054 | Mozilla Firefox和SeaMonkey JavaScript非本地变量缓冲区溢出漏洞 | |
| CVE-2011-0055 | Mozilla Firefox和SeaMonkey JSON.stringify方法释放后使用漏洞 | |
| CVE-2011-0056 | Mozilla Firefox和SeaMonkey JavaScript引擎缓冲区溢出漏洞 | |
| CVE-2011-0057 | Mozilla Firefox和SeaMonkey Web Worker实现释放后使用漏洞 | |
| CVE-2011-0059 | Mozilla Firefox和SeaMonkey跨站请求伪造漏洞 | |
| CVE-2011-0061 | Mozilla Firefox/Thunderbird/SeaMonkey缓冲区溢出漏洞 | |
| CVE-2011-0062 | Mozilla Firefox和SeaMonkey浏览器引擎拒绝服务漏洞 | |
| CVE-2011-0762 | Beasts vsftpd 资源管理错误漏洞 | |
| CVE-2011-1004 | Ruby 'FileUtils.remove_entry_secure()'方法任意文件删除漏洞 | |
| CVE-2011-1005 | Ruby 'Exception#to_s'方法安全限制绕过漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8196
JeecgBoot mLogin Endpoint LoginController.java authorization - CVE-2026-8195
JeecgBoot SVG File CommonController.java cross site scriptin - CVE-2026-8194
osTicket Dispatcher class.dispatcher.php cross-site request - CVE-2026-8193
Akaunting Invoice PDF Rendering dompdf.php server-side reque - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-
V. Comments for CVE-2011-0058
No comments yet