Unrated severityNVD Advisory· Published Apr 15, 2011· Updated Apr 29, 2026
CVE-2011-0195
CVE-2011-0195
Description
The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site. NOTE: this may overlap CVE-2011-1202.
Affected products
2cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- lists.apple.com/archives/security-announce/2011//Apr/msg00000.htmlnvdVendor Advisory
- lists.apple.com/archives/security-announce/2011//Jul/msg00002.htmlnvd
- lists.apple.com/archives/security-announce/2011//Jun/msg00000.htmlnvd
- support.apple.com/kb/HT4723nvd
- support.apple.com/kb/HT4808nvd
- www.securitytracker.com/idnvd
News mentions
0No linked articles in our index yet.