Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-y216-d7mt-t7dd
Vulnerability ID VCID-y216-d7mt-t7dd
Aliases CVE-2011-3658
Summary Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation.
Status Published
Exploitability 2.0
Weighted Severity 9.0
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.75876 https://api.first.org/data/v1/epss?cve=CVE-2011-3658
epss 0.75876 https://api.first.org/data/v1/epss?cve=CVE-2011-3658
epss 0.75876 https://api.first.org/data/v1/epss?cve=CVE-2011-3658
epss 0.75876 https://api.first.org/data/v1/epss?cve=CVE-2011-3658
epss 0.75876 https://api.first.org/data/v1/epss?cve=CVE-2011-3658
epss 0.75876 https://api.first.org/data/v1/epss?cve=CVE-2011-3658
epss 0.75876 https://api.first.org/data/v1/epss?cve=CVE-2011-3658
epss 0.75876 https://api.first.org/data/v1/epss?cve=CVE-2011-3658
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2011-55
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3658.json
https://api.first.org/data/v1/epss?cve=CVE-2011-3658
770676 https://bugzilla.redhat.com/show_bug.cgi?id=770676
CVE-2011-3658 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3658
CVE-2011-3658;OSVDB-77953 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/18847.rb
CVE-2011-3658;OSVDB-77953 Exploit http://www.zerodayinitiative.com/advisories/ZDI-12-056/
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2011-55 https://www.mozilla.org/en-US/security/advisories/mfsa2011-55
USN-1306-1 https://usn.ubuntu.com/1306-1/
USN-1343-1 https://usn.ubuntu.com/1343-1/
USN-1401-1 https://usn.ubuntu.com/1401-1/
USN-1401-2 https://usn.ubuntu.com/1401-2/
Data source Exploit-DB
Date added May 9, 2012
Description Mozilla Firefox 7 / 8 < 8.0.1 - nsSVGValue Out-of-Bounds Access (Metasploit)
Ransomware campaign use Known
Source publication date May 9, 2012
Exploit type remote
Platform windows
Source update date May 9, 2012
Source URL http://www.zerodayinitiative.com/advisories/ZDI-12-056/
Data source Metasploit
Description This module exploits an out-of-bounds access flaw in Firefox 7 and 8 (<= 8.0.1). The notification of nsSVGValue observers via nsSVGValue::NotifyObservers(x,y) uses a loop which can result in an out-of-bounds access to attacker-controlled memory. The mObserver ElementAt() function (which picks up pointers), does not validate if a given index is out of bound. If a custom observer of nsSVGValue is created, which removes elements from the original observer, and memory layout is manipulated properly, the ElementAt() function might pick up an attacker provided pointer, which can be leveraged to gain remote arbitrary code execution.
Note 
Reliability:
  - unknown-reliability
Stability:
  - unknown-stability
SideEffects:
  - unknown-side-effects
Ransomware campaign use Unknown
Source publication date Dec. 6, 2011
Platform Windows
Source URL https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/windows/browser/mozilla_nssvgvalue.rb
Exploit Prediction Scoring System (EPSS)
Percentile 0.98902
EPSS Score 0.75876
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:08:28.133988+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201301-01 38.0.0