REDHAT-BUG-684386
First published: Sat Mar 12 2011(Updated: )
Chris Evans discovered a heap address leak in XSLT The bug is in the generate-id() XPath function, and is sometimes used in XSL transforms. This is a low severity information leak, that does not corrupt anything, However it can be paired with other bugs and can be perhaps used as an exploit aid against ASLR. References: <a href="http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html">http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html</a> <a href="http://git.gnome.org/browse/libxslt/commit/?id=ecb6bcb8d1b7e44842edde3929f412d46b40c89f">http://git.gnome.org/browse/libxslt/commit/?id=ecb6bcb8d1b7e44842edde3929f412d46b40c89f</a> This has been assigned <a href="https://access.redhat.com/security/cve/CVE-2011-1202">CVE-2011-1202</a>.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| libxslt |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html
- http://git.gnome.org/browse/libxslt/commit/?id=ecb6bcb8d1b7e44842edde3929f412d46b40c89f
- https://access.redhat.com/security/cve/CVE-2011-1202
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=684388
- https://rhn.redhat.com/errata/RHSA-2011-0471.html
- https://rhn.redhat.com/errata/RHSA-2012-1265.html
- https://bugzilla.redhat.com/show_bug.cgi?id=684386
Frequently Asked Questions
What is the severity of REDHAT-BUG-684386?
The severity of REDHAT-BUG-684386 is low, involving an information leak without corruption.
How does REDHAT-BUG-684386 impact security?
REDHAT-BUG-684386 may be used in conjunction with other vulnerabilities to aid exploit attempts.
What software is affected by REDHAT-BUG-684386?
The affected software for REDHAT-BUG-684386 includes GNOME libxslt.
Is there a fix for REDHAT-BUG-684386?
Yes, users should update their GNOME libxslt to the latest version to mitigate the issue.
What function is involved in REDHAT-BUG-684386?
The function involved in REDHAT-BUG-684386 is the generate-id() XPath function used in XSL transforms.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-1202
- agent/references
- agent/severity
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/gnome
- canonical/libxslt