Business information leak In libxslt
Description
The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 12 | 1.1.26-7 | ||
debian 11 | 1.1.26-7 | ||
debian 14 | 1.1.26-7 | ||
 rpm rhel6 | 0:1.1.26-2.el6_3.1 | ||
debian 13 | 1.1.26-7 | ||
rpm rhel5 | 0:1.9.2.17-3.el5_6 | ||
rpm rhel5 | 0:3.6.17-1.el5_6 | ||
rpm rhel6 | 0:1.9.2.17-4.el6_0 | ||
rpm rhel6 | 0:3.6.17-1.el6_0 | ||
rpm rhel5 | 0:1.1.17-4.el5_8.3 |
1-10 of 11
10
Aliases
1. 2. 3. 4. 5.