NetSight
IP …
medium4.3

CVE-2010-4008

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations durin…

Impact

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.

Affected products

VendorProductAffected versions
GoogleChrome
before 7.0.517.44
AppleItunes
before 10.2
AppleSafari
before 5.0.4
AppleIphone Os
before 4.2
AppleMac Os X
before 10.6.7
XmlsoftLibxml2
before 2.7.8
DebianDebian Linux
Versions 5.0, 6.0
CanonicalUbuntu Linux
Versions 6.06, 8.04, 9.10, 10.04, 10.10
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Server Eus
Version 6.3
RedhatEnterprise Linux Workstation
Version 6.0

Weakness classification

CWE-119

References