Unrated severityNVD Advisory· Published Mar 11, 2011· Updated Jun 16, 2026
CVE-2011-1202
CVE-2011-1202
Description
The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- osv-coords2 versionspkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed
< 128.5.1-1.1+ 1 more
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 50.1.0-1.1
Patches
Vulnerability mechanics
References
12- git.gnome.org/browse/libxslt/commit/nvdPatchThird Party Advisory
- code.google.com/p/chromium/issues/detailnvdExploitIssue TrackingPatchVendor Advisory
- downloads.avaya.com/css/P8/documents/100144158nvdThird Party Advisory
- googlechromereleases.blogspot.com/2011/03/chrome-stable-release.htmlnvdVendor Advisory
- scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.htmlnvdThird Party Advisory
- www.mandriva.com/security/advisoriesnvdThird Party Advisory
- www.mandriva.com/security/advisoriesnvdThird Party Advisory
- www.securityfocus.com/bid/46785nvdThird Party AdvisoryVDB Entry
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/65966nvdThird Party AdvisoryVDB Entry
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14244nvdThird Party Advisory
- www.vupen.com/english/advisories/2011/0628nvdPermissions Required
News mentions
0No linked articles in our index yet.