PT-2011-2944
CVE-2011-1202
·
تاريخ النشر
2011-03-11
·
تاريخ التحديث
2024-12-12
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
libxslt versions 1.1.26 and earlier
Description
The issue allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT
generate-id XPath function. This is related to the xsltGenerateIdFunction function in functions.c.Recommendations
For libxslt versions 1.1.26 and earlier, consider updating to a version later than 1.1.26 to resolve the issue. As a temporary workaround, consider restricting the use of the
generate-id XPath function in XML documents until a patch is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾