CVE-2011-1713 | BDVDB-2026-45808 Detail

Description#

Microsoft msxml.dll, as used in Internet Explorer 8 on Windows 7, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function. NOTE: this might overlap CVE-2011-1202.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12693
http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/66835

Exploit#

No public exploit known

History#

Version 12011-04-15Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.