high7.5
CVE-2010-4494
Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause…
Impact
Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | before 8.0.552.215 | |
| Xmlsoft | Libxml2 | through 2.7.8 |
| Apple | Itunes | before 10.2 |
| Apple | Safari | before 5.0.4 |
| Apple | Iphone Os | before 4.3.0 |
| Apple | Mac Os X | before 10.6.7 |
| Opensuse | Opensuse | Versions 11.2, 11.3 |
| Suse | Suse Linux Enterprise Server | Version 11 |
| Fedoraproject | Fedora | Version 14 |
| Redhat | Enterprise Linux Desktop | Version 6.0 |
| Redhat | Enterprise Linux Eus | Version 6.3 |
| Redhat | Enterprise Linux Server | Version 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://code.google.com/p/chromium/issues/detail?id=63444
- http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates.html
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html
- http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
- http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055775.html
- http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
- http://marc.info/?l=bugtraq&m=139447903326211&w=2
- http://rhn.redhat.com/errata/RHSA-2013-0217.html
- http://secunia.com/advisories/40775
- http://secunia.com/advisories/42472
- http://secunia.com/advisories/42721
- http://secunia.com/advisories/42762
- http://support.apple.com/kb/HT4554
- http://support.apple.com/kb/HT4564
- http://support.apple.com/kb/HT4566
- http://support.apple.com/kb/HT4581
- http://www.debian.org/security/2010/dsa-2137
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:260
- http://www.openoffice.org/security/cves/CVE-2010-4008_CVE-2010-4494.html
- http://www.redhat.com/support/errata/RHSA-2011-1749.html
- http://www.vupen.com/english/advisories/2010/3319
- http://www.vupen.com/english/advisories/2010/3336
- http://www.vupen.com/english/advisories/2011/0230