Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2011-1202

EPSS 0.64% · P71
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2011-1202

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Google Chrome libxslt堆内存地址敏感信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。 Google Chrome 10.0.648.127之前版本的libxslt 1.1.26及之前版本的functions.c中的xsltGenerateIdFunction函数中存在漏洞。远程攻击者可借助XML文档获取关于堆内存地址的潜在敏感信息，该文档包含对XSLT generate-id Xpath函数的调用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2011-1202

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2011-1202

Please Login to view more intelligence information

Same Patch Batch · n/a · 2011-03-11 · 42 CVEs total

CVE-2011-0159Apple iOS Safari Settings功能用户追踪漏洞
CVE-2011-1413Google Chrome拒绝服务漏洞
CVE-2010-3609VMware多个产品SLPD OpenSLP拒绝服务漏洞
CVE-2011-0456OTRS webscript.pl命令注入漏洞
CVE-2011-1137ProFTPD mod_sftp模块整数溢出漏洞
CVE-2011-1416Research In Motion BlackBerry Torch内存内容读取漏洞
CVE-2011-1417Apple iOS MobileSafari OfficeArtBlip解析整数溢出漏洞
CVE-2011-1290WebKit 数字错误漏洞
CVE-2010-4651GNU patch util.c目录遍历漏洞
CVE-2011-0157Apple iOS WebKit任意代码执行漏洞
CVE-2011-0158Apple iOS MobileSafari拒绝服务漏洞
CVE-2011-1286Google Chrome V8无效内存访问漏洞
CVE-2011-0160Apple Safari和iOS WebKit信息泄露漏洞
CVE-2011-0161Apple Safari和iOS WebKit同源策略绕过和CSS令牌序列注入漏洞
CVE-2011-0162Apple iOS和TV Wi-Fi拒绝服务漏洞
CVE-2011-0163Apple Safari和iOS WebKit拒绝服务漏洞
CVE-2011-0166Apple Safari WebKit HTML5拖放功能同源策略绕过和敏感信息泄露漏洞
CVE-2011-0167Apple Safari WebKit windows功能同源策略绕过和任意本地文件上传漏洞
CVE-2011-0169Apple Safari WebKit同源策略绕过和跨站脚本攻击漏洞
CVE-2011-0715Apache HTTP服务器'mod_dav_svn'模块空指针引用漏洞

Showing top 20 of 42 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2011-1202

No comments yet

Leave a comment