CVE

Id
48107  
CVE No.
CVE-2011-0195  
Status
Candidate  
Description
The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site. NOTE: this may overlap CVE-2011-1202.  
Phase
Assigned (20101223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
523060 48107 CVE-2011-0195 CONFIRM:http://support.apple.com/kb/HT4723  View
523061 48107 CVE-2011-0195 CONFIRM:http://support.apple.com/kb/HT4808  View
523062 48107 CVE-2011-0195 APPLE:APPLE-SA-2011-04-14-1  View
523063 48107 CVE-2011-0195 URL:http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html  View
523064 48107 CVE-2011-0195 APPLE:APPLE-SA-2011-06-23-1  View
523065 48107 CVE-2011-0195 URL:http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html  View
523066 48107 CVE-2011-0195 APPLE:APPLE-SA-2011-07-20-1  View
523067 48107 CVE-2011-0195 URL:http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html  View
523068 48107 CVE-2011-0195 SECTRACK:1025365  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31588 JVNDB-2011-001828 Apple Mac OS X の ColorSync における整数オーバーフローの脆弱性 Apple Mac OS X の ColorSync には、整数オーバーフローの脆弱性が存在します。 CVE-2011-0200 48107 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001828.html  View