PT-2011-2944 · Libxslt+2 · Libxslt+2

Chris Evans · Published 2011-03-11 · Updated 2024-12-12 · CVE-2011-1202

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions libxslt versions 1.1.26 and earlier

Description The issue allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function. This is related to the xsltGenerateIdFunction function in functions.c.

Recommendations For libxslt versions 1.1.26 and earlier, consider updating to a version later than 1.1.26 to resolve the issue. As a temporary workaround, consider restricting the use of the generate-id XPath function in XML documents until a patch is available.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CESA-2012_1265

CVE-2011-1202

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

RHSA-2011:0471

RHSA-2011_0471

RHSA-2012:1265

RHSA-2012_1265

Affected Products

Centos

Red Hat

Libxslt

References · 2122

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_nstreerange.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_mchannel.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/mozilla_mchannel.rb · Exploit
• 🔥 http://code.google.com/p/chromium/issues/detail?id=73716 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2011-1202 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09441 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1202 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-0471.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3970 · Security Note
• https://bdu.fstec.ru/vul/2015-09713 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2893 · Security Note
• http://git.gnome.org/browse/libxslt/commit/?id=ecb6bcb8d1b7e44842edde3929f412d46b40c89f · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2825 · Security Note
• http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html · Vendor Advisory