CVE-2010-4008

Fixed in a distro release EPSS 3%

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.

Published 2010-11-16 · CVE record · OSV

Products: google chrome, apple itunes, apple safari, apple iphone_os, apple mac_os_x, xmlsoft libxml2, debian_linux, canonical ubuntu_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation, opensuse, suse_linux_enterprise_server, apache openoffice

Distro releases