CVE-2011-1202 in Chrome
摘要 (英语)
The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
预定
2011-03-03
披露
2011-03-10
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 56802 | Google Chrome libxslt functions.c xsltGenerateIdFunction 信息公开 | 200 | 概念验证 | 官方修复 | CVE-2011-1202 |