CVE-2010-4494
Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
- EPSS
- 5.9% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- CWE
- CWE-415
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:openoffice
- apple:iphone_os
- apple:itunes
- apple:mac_os_x
- apple:safari
- debian:debian_linux
- fedoraproject:fedora
- google:chrome
- hp:insight_control_server_deployment
- hp:rapid_deployment_pack
- opensuse:opensuse
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_eus
- redhat:enterprise_linux_server
- redhat:enterprise_linux_workstation
- suse:suse_linux_enterprise_server
- xmlsoft:libxml2
References
- http://code.google.com/p/chromium/issues/detail?id=63444
- http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates.html
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html
- http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html