| Name | CVE-2011-1202 |
| Description | The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| Debian Bugs | 617413 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| libxslt (PTS) | jessie, jessie (lts) | 1.1.28-2+deb8u7 | fixed |
| stretch (lts), stretch | 1.1.29-2.1+deb9u3 | fixed |
| buster (security), buster, buster (lts) | 1.1.32-2.2~deb10u2 | fixed |
| bullseye (security), bullseye | 1.1.34-4+deb11u1 | fixed |
| bookworm | 1.1.35-1 | fixed |
| sid, trixie | 1.1.35-1.1 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|
| iceape | source | lenny | (not affected) | | | |
| iceape | source | (unstable) | 2.0.14-1 | | | |
| iceweasel | source | lenny | (not affected) | | | |
| iceweasel | source | (unstable) | 3.5.19-1 | | | |
| libxslt | source | squeeze | 1.1.26-6+squeeze1 | | | |
| libxslt | source | (unstable) | 1.1.26-7 | low | | 617413 |
| xulrunner | source | (unstable) | (unfixed) | unimportant | | |
Notes
[lenny] - xulrunner <no-dsa> (minor issue)
[squeeze] - iceweasel <no-dsa> (minor issue)
[lenny] - iceweasel <not-affected> (Lenny's iceweasel uses Xulrunner from the xulrunner source pkg)
[squeeze] - iceape <no-dsa> (minor issue)
[lenny] - iceape <not-affected> (Only a stub package)
http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html
[lenny] - libxslt <no-dsa> (minor issue)
xulrunner in wheezy is not covered by security support