The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libxslt-pythonUpgrade xulrunnerUpgrade firefoxUpgrade libxslt-develUpgrade xulrunner-develUpgrade libxslt | Dec 1, 2016 | Mar 10, 2011 |
| Debian | — | Upgrade libxslt | Jul 30, 2024 | Mar 11, 2011 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/icecat.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | Mar 10, 2011 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Mar 21, 2012 | Mar 10, 2011 |
| Mfsa2011 18 | — | Upgrade to Mozilla Firefox version 4.0.1 | Jun 14, 2012 | Mar 10, 2011 |
| Oracle Solaris | — | Upgrade library/python-2/libxsl-26 to version 1.1.26-0.175.1.4.0.4.0 on Solaris 11.1Upgrade library/libxslt to version 1.1.26-0.175.1.4.0.4.0 on Solaris 11.1Upgrade library/python-2/libxsl-27 to version 1.1.26-0.175.1.4.0.4.0 on Solaris 11.1 | May 29, 2017 | Mar 10, 2011 |
| Oracle_linux | — | Upgrade libxslt-develUpgrade xulrunner-develUpgrade libxsltUpgrade libxslt-pythonUpgrade firefoxUpgrade xulrunner | Oct 16, 2024 | Mar 11, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 22, 2011 |
| Suse | — | Upgrade mozilla-xulrunner192-x86Upgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-gnome-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade xulrunner-1.9.1Upgrade libxslt1.1Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Mar 11, 2011 |
| Vmsa 2013 0001 | — | Upgrade VMware ESX 4.1 to build number 988178 | Feb 4, 2013 | Mar 10, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub