The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libxsltUpgrade xulrunner-develUpgrade libxslt-develUpgrade xulrunnerUpgrade libxslt-pythonUpgrade firefox | Dec 1, 2016 | Mar 10, 2011 |
| Debian | — | Upgrade libxslt | Jul 30, 2024 | Mar 11, 2011 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Mar 10, 2011 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Mar 21, 2012 | Mar 10, 2011 |
| Mfsa2011 18 | — | Upgrade to Mozilla Firefox version 4.0.1 | Jun 14, 2012 | Mar 10, 2011 |
| Oracle Solaris | — | Upgrade library/libxslt to version 1.1.26-0.175.1.4.0.4.0 on Solaris 11.1Upgrade library/python-2/libxsl-26 to version 1.1.26-0.175.1.4.0.4.0 on Solaris 11.1Upgrade library/python-2/libxsl-27 to version 1.1.26-0.175.1.4.0.4.0 on Solaris 11.1 | May 29, 2017 | Mar 10, 2011 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade firefoxUpgrade xulrunner-develUpgrade libxslt-develUpgrade libxsltUpgrade libxslt-python | Oct 16, 2024 | Mar 11, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 22, 2011 |
| Suse | — | Upgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefoxUpgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-develUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade xulrunner-1.9.1Upgrade libxslt1.1Upgrade firefoxUpgrade thunderbird | Nov 8, 2024 | Mar 11, 2011 |
| Vmsa 2013 0001 | — | Upgrade VMware ESX 4.1 to build number 988178 | Feb 4, 2013 | Mar 10, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub