CVE-2010-4494
Fixed in a distro release EPSS 6%
Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
Products: google chrome, xmlsoft libxml2, apple itunes, apple safari, apple iphone_os, apple mac_os_x, opensuse, suse_linux_enterprise_server, fedoraproject fedora, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_workstation, debian_linux, hp insight_control_server_deployment, hp rapid_deployment_pack, apache openoffice
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libxml2 | 2.7.8.dfsg-2 |
| Debian 13 | libxml2 | 2.7.8.dfsg-2 |
| Debian 14 | libxml2 | 2.7.8.dfsg-2 |
| Debian 5.0 | libxml2 | 2.6.32.dfsg-5+lenny3 |
| Red Hat Enterprise Linux 6 | libxml2 | 0:2.7.6-4.el6 |
| Red Hat Enterprise Linux 6 | libxml2-debuginfo | 0:2.7.6-4.el6 |
| Red Hat Enterprise Linux 6 | libxml2-devel | 0:2.7.6-4.el6 |
| Red Hat Enterprise Linux 6 | libxml2-python | 0:2.7.6-4.el6 |
| Red Hat Enterprise Linux 6 | libxml2-static | 0:2.7.6-4.el6 |
| Red Hat Enterprise Linux 6 | mingw32-libxml2 | 0:2.7.6-6.el6_3 |
| Red Hat Enterprise Linux 6 | mingw32-libxml2-debuginfo | 0:2.7.6-6.el6_3 |
| Red Hat Enterprise Linux 6 | mingw32-libxml2-static | 0:2.7.6-6.el6_3 |
| openSUSE Tumbleweed | libxml2 | 2.9.4-1.22 |