NetSight
high7.5

CVE-2010-4494

Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause…

Impact

Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.

Affected products

VendorProductAffected versions
GoogleChrome
before 8.0.552.215
XmlsoftLibxml2
through 2.7.8
AppleItunes
before 10.2
AppleSafari
before 5.0.4
AppleIphone Os
before 4.3.0
AppleMac Os X
before 10.6.7
OpensuseOpensuse
Versions 11.2, 11.3
SuseSuse Linux Enterprise Server
Version 11
FedoraprojectFedora
Version 14
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Eus
Version 6.3
RedhatEnterprise Linux Server
Version 6.0

Weakness classification

References