CVE-2011-1202

Name of the Vulnerable Software and Affected Versions libxslt versions 1.1.26 and earlier

Description The issue allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function. This is related to the xsltGenerateIdFunction function in functions.c.

Recommendations For libxslt versions 1.1.26 and earlier, consider updating to a version later than 1.1.26 to resolve the issue. As a temporary workaround, consider restricting the use of the generate-id XPath function in XML documents until a patch is available.