Description
The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site. NOTE: this may overlap CVE-2011-1202.
References
- http://support.apple.com/kb/HT4723
- APPLE-SA-2011-06-23-1 vendor-advisory
- 1025365 vdb-entry
- http://support.apple.com/kb/HT4808
- APPLE-SA-2011-04-14-1 vendor-advisory
- APPLE-SA-2011-07-20-1 vendor-advisory