CVE-2011-1202 The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensiti...
MediumCVSS 4.3
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | < 10.0.648.127 | 10.0.648.127 |
| xmlsoft libxslt | <= 1.1.26 | No fix listed |
| debian/libxslt(Debian:12) | < 1.1.26-7 | 1.1.26-7 |
| debian/libxslt(Debian:13) | < 1.1.26-7 | 1.1.26-7 |
| debian/libxslt(Debian:14) | < 1.1.26-7 | 1.1.26-7 |
References
- code.google.com exploit issue-tracking patch vendor-advisory
- downloads.avaya.com third-party-advisory
- git.gnome.org patch third-party-advisory
- googlechromereleases.blogspot.com vendor-advisory
- scarybeastsecurity.blogspot.com third-party-advisory
- MDVSA-2011:079 third-party-advisory vendor-advisory
- MDVSA-2012:164 third-party-advisory vendor-advisory
- 46785 third-party-advisory vdb-entry
- ADV-2011-0628 permissions-required vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory
- google-xslt-info-disclosure(65966) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:14244 signature third-party-advisory vdb-entry
- Debian Security Tracker CVE-2011-1202 vendor-advisory
- bugs.debian.org issue-tracking