CVE-2011-1202
CVE-2011-1202
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
EPSS 2,5% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
libxslt Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 1.1.26-7
Mettez à jour vers 1.1.26-7
libxslt Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 1.1.26-7
Mettez à jour vers 1.1.26-7
libxslt Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 1.1.26-7
Mettez à jour vers 1.1.26-7
Sources originales
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14244
- http://www.securityfocus.com/bid/46785
- http://git.gnome.org/browse/libxslt/commit/?id=ecb6bcb8d1b7e44842edde3929f412d46b40c89f
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:079
- http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html
- http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html
- http://code.google.com/p/chromium/issues/detail?id=73716
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65966
- https://bugzilla.redhat.com/show_bug.cgi?id=684386
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:164
- http://downloads.avaya.com/css/P8/documents/100144158
- http://www.vupen.com/english/advisories/2011/0628
- https://nvd.nist.gov/vuln/detail/CVE-2011-1202