CVE-2011-1202

The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.

• CWE-200

• http://code.google.com/p/chromium/issues/detail?id=73716Exploit, Issue Tracking, Patch, Vendor Advisory
• http://downloads.avaya.com/css/P8/documents/100144158Third Party Advisory
• http://git.gnome.org/browse/libxslt/commit/?id=ecb6bcb8d1b7e44842edde3929f412d46b40c89fPatch, Third Party Advisory
• http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.htmlVendor Advisory
• http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.htmlThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:079Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:164Third Party Advisory
• http://www.securityfocus.com/bid/46785Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0628Permissions Required
• https://bugzilla.redhat.com/show_bug.cgi?id=684386Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65966Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14244Third Party Advisory
• http://code.google.com/p/chromium/issues/detail?id=73716Exploit, Issue Tracking, Patch, Vendor Advisory
• http://downloads.avaya.com/css/P8/documents/100144158Third Party Advisory
• http://git.gnome.org/browse/libxslt/commit/?id=ecb6bcb8d1b7e44842edde3929f412d46b40c89fPatch, Third Party Advisory
• http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.htmlVendor Advisory
• http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.htmlThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:079Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:164Third Party Advisory
• http://www.securityfocus.com/bid/46785Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0628Permissions Required
• https://bugzilla.redhat.com/show_bug.cgi?id=684386Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65966Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14244Third Party Advisory

Published

Mar 11, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1196The OGG container implementation in Google Chrome before 10.…
• CVE-2011-1197Google Chrome before 10.0.648.127 does not properly perform …
• CVE-2011-1198The video functionality in Google Chrome before 10.0.648.127…
• CVE-2011-1199Google Chrome before 10.0.648.127 does not properly handle D…
• CVE-2011-1200Google Chrome before 10.0.648.127 does not properly perform …
• CVE-2011-1201The context implementation in WebKit, as used in Google Chro…
• CVE-2011-1203Google Chrome before 10.0.648.127 does not properly handle S…
• CVE-2011-1204Google Chrome before 10.0.648.127 does not properly handle a…
• CVE-2011-1205Multiple buffer overflows in unspecified COM objects in Rati…
• CVE-2011-1206Stack-based buffer overflow in the server process in ibmslap…
• CVE-2011-1207The ActiveBar1 ActiveX control in the Data Dynamics ActiveBa…
• CVE-2011-1208IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1…