The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade firefoxUpgrade libxslt-pythonUpgrade libxsltUpgrade xulrunner-develUpgrade libxslt-devel | Dec 1, 2016 | Mar 10, 2011 |
| Debian | — | Upgrade libxslt | Jul 30, 2024 | Mar 11, 2011 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox. | Oct 30, 2017 | Mar 10, 2011 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Mar 21, 2012 | Mar 10, 2011 |
| Mfsa2011 18 | — | Upgrade to Mozilla Firefox version 4.0.1 | Jun 14, 2012 | Mar 10, 2011 |
| Oracle Solaris | — | Upgrade library/python-2/libxsl-27 to version 1.1.26-0.175.1.4.0.4.0 on Solaris 11.1Upgrade library/libxslt to version 1.1.26-0.175.1.4.0.4.0 on Solaris 11.1Upgrade library/python-2/libxsl-26 to version 1.1.26-0.175.1.4.0.4.0 on Solaris 11.1 | May 29, 2017 | Mar 10, 2011 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade firefoxUpgrade libxsltUpgrade libxslt-develUpgrade libxslt-pythonUpgrade xulrunner-devel | Oct 16, 2024 | Mar 11, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 22, 2011 |
| Suse | — | Upgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbirdUpgrade libxslt1.1Upgrade xulrunner-1.9.1Upgrade xulrunner-1.9.2 | Nov 8, 2024 | Mar 11, 2011 |
| Vmsa 2013 0001 | — | Upgrade VMware ESX 4.1 to build number 988178 | Feb 4, 2013 | Mar 10, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub