CVE-2011-1202

Description

The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14244

https://exchange.xforce.ibmcloud.com/vulnerabilities/65966

https://bugzilla.redhat.com/show_bug.cgi?id=684386

http://www.vupen.com/english/advisories/2011/0628

http://www.securityfocus.com/bid/46785

http://www.mandriva.com/security/advisories?name=MDVSA-2012:164

http://www.mandriva.com/security/advisories?name=MDVSA-2011:079

http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html

http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html

http://git.gnome.org/browse/libxslt/commit/?id=ecb6bcb8d1b7e44842edde3929f412d46b40c89f

http://downloads.avaya.com/css/P8/documents/100144158

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3