CVE-2011-1202

CVE-2011-1202 describes an information disclosure vulnerability in the xsltGenerateIdFunction within libxslt 1.1.26 and earlier, impacting products like Google Chrome. Attackers can exploit this by crafting malicious XML documents that, when processed, reveal sensitive heap memory addresses. This vulnerability has a CVSS score of 4.3, indicating a medium severity. It requires medium attack complexity (AC:M) and can be exploited remotely (AV:N) without authentication (Au:N), leading to a potential compromise of confidentiality (C:P) by exposing memory layout. There is no evidence of active exploitation, and no public exploit code is available in Metasploit or ExploitDB. The vulnerability has garnered minimal community discussion and media coverage, suggesting low public awareness and limited current threat.