CVEvulnerability
CVE-2010-4008
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-11-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-119
Description
libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.
Affected configurations
• google chrome (< 7.0.517.44)
• apple itunes (< 10.2)
• apple safari (< 5.0.4)
• apple iphone os (< 4.2)
• apple mac os x (< 10.6.7)
• xmlsoft libxml2 (< 2.7.8)
• debian debian linux 5.0
• debian debian linux 6.0
• canonical ubuntu linux 6.06
• canonical ubuntu linux 8.04
• canonical ubuntu linux 9.10
• canonical ubuntu linux 10.04
• canonical ubuntu linux 10.10
• redhat enterprise linux desktop 6.0
• redhat enterprise linux server 6.0
• redhat enterprise linux server eus 6.3
• redhat enterprise linux workstation 6.0
• opensuse opensuse 11.1
• opensuse opensuse 11.2
• opensuse opensuse 11.3
• suse suse linux enterprise server 10
• suse suse linux enterprise server 11
• apache openoffice (>= 2.0.0 <= 2.4.3)
• apache openoffice (>= 3.0.0 < 3.3.0)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://blog.bkis.com/en/libxml2-vulnerability-in-google-chrome-and-apple-safari/ Broken Link
- http://code.google.com/p/chromium/issues/detail?id=58731 Exploit, Issue Tracking, Patch, Vendor Advisory
- http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html Mailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html Mailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html Mailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html Mailing List, Third Party Advisory
- http://mail.gnome.org/archives/xml/2010-November/msg00015.html Mailing List, Release Notes, Vendor Advisory
- http://marc.info/?l=bugtraq&m=130331363227777&w=2 Third Party Advisory
- http://marc.info/?l=bugtraq&m=139447903326211&w=2 Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0217.html Third Party Advisory
- http://secunia.com/advisories/40775 Third Party Advisory
- http://secunia.com/advisories/42109 Third Party Advisory, Vendor Advisory
- http://secunia.com/advisories/42175 Third Party Advisory, Vendor Advisory
- http://secunia.com/advisories/42314 Third Party Advisory
- http://secunia.com/advisories/42429 Third Party Advisory
- http://support.apple.com/kb/HT4456 Third Party Advisory
- http://support.apple.com/kb/HT4554 Third Party Advisory
- http://support.apple.com/kb/HT4566 Third Party Advisory
- http://support.apple.com/kb/HT4581 Third Party Advisory
- http://www.debian.org/security/2010/dsa-2128 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:243 Third Party Advisory
- http://www.openoffice.org/security/cves/CVE-2010-4008_CVE-2010-4494.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1749.html Third Party Advisory
- http://www.securityfocus.com/bid/44779 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1016-1 Third Party Advisory
- http://www.vupen.com/english/advisories/2010/3046 Permissions Required
- http://www.vupen.com/english/advisories/2010/3076 Permissions Required
- http://www.vupen.com/english/advisories/2010/3100 Permissions Required
- http://www.vupen.com/english/advisories/2011/0230 Permissions Required
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12148 Third Party Advisory
- http://blog.bkis.com/en/libxml2-vulnerability-in-google-chrome-and-apple-safari/ Broken Link
- http://code.google.com/p/chromium/issues/detail?id=58731 Exploit, Issue Tracking, Patch, Vendor Advisory
- http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html Mailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html Mailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html Mailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html Mailing List, Third Party Advisory
- http://mail.gnome.org/archives/xml/2010-November/msg00015.html Mailing List, Release Notes, Vendor Advisory
- http://marc.info/?l=bugtraq&m=130331363227777&w=2 Third Party Advisory
- http://marc.info/?l=bugtraq&m=139447903326211&w=2 Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0217.html Third Party Advisory
- http://secunia.com/advisories/40775 Third Party Advisory
- http://secunia.com/advisories/42109 Third Party Advisory, Vendor Advisory
- http://secunia.com/advisories/42175 Third Party Advisory, Vendor Advisory
- http://secunia.com/advisories/42314 Third Party Advisory
- http://secunia.com/advisories/42429 Third Party Advisory
- http://support.apple.com/kb/HT4456 Third Party Advisory
- http://support.apple.com/kb/HT4554 Third Party Advisory
- http://support.apple.com/kb/HT4566 Third Party Advisory
- http://support.apple.com/kb/HT4581 Third Party Advisory
- http://www.debian.org/security/2010/dsa-2128 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:243 Third Party Advisory
- http://www.openoffice.org/security/cves/CVE-2010-4008_CVE-2010-4494.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1749.html Third Party Advisory
- http://www.securityfocus.com/bid/44779 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1016-1 Third Party Advisory
- http://www.vupen.com/english/advisories/2010/3046 Permissions Required
- http://www.vupen.com/english/advisories/2010/3076 Permissions Required
- http://www.vupen.com/english/advisories/2010/3100 Permissions Required
- http://www.vupen.com/english/advisories/2011/0230 Permissions Required
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12148 Third Party Advisory