CVE-2011-1202

The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://code.google.com/p/chromium/issues/detail?id=73716	Exploit Issue Tracking Patch Vendor Advisory
http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html	Vendor Advisory
http://www.securityfocus.com/bid/46785	Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2011/0628	Permissions Required
http://git.gnome.org/browse/libxslt/commit/?id=ecb6bcb8d1b7e44842edde3929f412d46b40c89f	Patch Third Party Advisory
http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=684386	Issue Tracking Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:079	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:164	Third Party Advisory
http://downloads.avaya.com/css/P8/documents/100144158	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65966	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14244	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:google:chrome::::::::
	cpe:2.3:a:xmlsoft:libxslt::::::::

Information

Published : 2011-03-10 18:01

Updated : 2020-06-04 07:16

NVD link : CVE-2011-1202

Mitre link : CVE-2011-1202

JSON object : View

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Products Affected

xmlsoft

libxslt

google

chrome

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://code.google.com/p/chromium/issues/detail?id=73716", "name": "http://code.google.com/p/chromium/issues/detail?id=73716", "tags": ["Exploit", "Issue Tracking", "Patch", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html", "name": "http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/46785", "name": "46785", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "http://www.vupen.com/english/advisories/2011/0628", "name": "ADV-2011-0628", "tags": ["Permissions Required"], "refsource": "VUPEN"}, {"url": "http://git.gnome.org/browse/libxslt/commit/?id=ecb6bcb8d1b7e44842edde3929f412d46b40c89f", "name": "http://git.gnome.org/browse/libxslt/commit/?id=ecb6bcb8d1b7e44842edde3929f412d46b40c89f", "tags": ["Patch", "Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html", "name": "http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=684386", "name": "https://bugzilla.redhat.com/show_bug.cgi?id=684386", "tags": ["Issue Tracking", "Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:079", "name": "MDVSA-2011:079", "tags": ["Third Party Advisory"], "refsource": "MANDRIVA"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:164", "name": "MDVSA-2012:164", "tags": ["Third Party Advisory"], "refsource": "MANDRIVA"}, {"url": "http://downloads.avaya.com/css/P8/documents/100144158", "name": "http://downloads.avaya.com/css/P8/documents/100144158", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65966", "name": "google-xslt-info-disclosure(65966)", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "XF"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14244", "name": "oval:org.mitre.oval:def:14244", "tags": ["Third Party Advisory"], "refsource": "OVAL"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-200"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2011-1202", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "acInsufInfo": false, "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2011-03-11T02:01Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.0.648.127"}, {"cpe23Uri": "cpe:2.3:a:xmlsoft:libxslt:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "1.1.26"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2020-06-04T14:16Z"}

4.3 /10