CVE-2011-1202
The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML…
Does this matter?
Lower severity and a low EPSS score (2.44%). Track it; it rarely justifies an emergency change on its own.
Description
The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
- EPSS
- 2.44% probability · 83th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- google/chrome · xmlsoft/libxslt
- Source
- cve@mitre.org
References
- http://code.google.com/p/chromium/issues/detail?id=73716Exploit, Issue Tracking, Patch, Vendor Advisory
- http://downloads.avaya.com/css/P8/documents/100144158Third Party Advisory
- http://git.gnome.org/browse/libxslt/commit/?id=ecb6bcb8d1b7e44842edde3929f412d46b40c89fPatch, Third Party Advisory
- http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.htmlVendor Advisory
- http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.htmlThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:079Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:164Third Party Advisory
- http://www.securityfocus.com/bid/46785Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2011/0628Permissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=684386Issue Tracking, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65966Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14244Third Party Advisory
- http://code.google.com/p/chromium/issues/detail?id=73716Exploit, Issue Tracking, Patch, Vendor Advisory
- http://downloads.avaya.com/css/P8/documents/100144158Third Party Advisory
- http://git.gnome.org/browse/libxslt/commit/?id=ecb6bcb8d1b7e44842edde3929f412d46b40c89fPatch, Third Party Advisory
- http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.htmlVendor Advisory
- http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.htmlThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:079Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:164Third Party Advisory
- http://www.securityfocus.com/bid/46785Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2011/0628Permissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=684386Issue Tracking, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65966Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14244Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.