NVD

Id
15331  
Name
CVE-2010-4008  
Description
libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-11-16  
Modified Date
2016-08-22  
Seq
2010-4008  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
86311 15331 CVE-2010-4008 http://blog.bkis.com/en/libxml2-vulnerability-in-google-chrome-and-apple-safari/  View
86312 15331 CVE-2010-4008 http://code.google.com/p/chromium/issues/detail?id=58731  View
86313 15331 CVE-2010-4008 http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html  View
86314 15331 CVE-2010-4008 APPLE-SA-2010-11-22-1  View
86315 15331 CVE-2010-4008 APPLE-SA-2011-03-09-2  View
86316 15331 CVE-2010-4008 APPLE-SA-2011-03-02-1  View
86317 15331 CVE-2010-4008 APPLE-SA-2011-03-21-1  View
86318 15331 CVE-2010-4008 SUSE-SR:2010:023  View
86319 15331 CVE-2010-4008 [xml] 20101104 Release of libxml2-2.7.8  View
86320 15331 CVE-2010-4008 SSRT100409  View
86321 15331 CVE-2010-4008 HPSBGN02970  View
86322 15331 CVE-2010-4008 oval:org.mitre.oval:def:12148  View
86323 15331 CVE-2010-4008 RHSA-2013:0217  View
86324 15331 CVE-2010-4008 http://support.apple.com/kb/HT4456  View
86325 15331 CVE-2010-4008 http://support.apple.com/kb/HT4554  View
86326 15331 CVE-2010-4008 http://support.apple.com/kb/HT4566  View
86327 15331 CVE-2010-4008 http://support.apple.com/kb/HT4581  View
86328 15331 CVE-2010-4008 DSA-2128  View
86329 15331 CVE-2010-4008 MDVSA-2010:243  View
86330 15331 CVE-2010-4008 http://www.openoffice.org/security/cves/CVE-2010-4008_CVE-2010-4494.html  View
86331 15331 CVE-2010-4008 RHSA-2011:1749  View
86332 15331 CVE-2010-4008 44779  View
86333 15331 CVE-2010-4008 USN-1016-1  View
86334 15331 CVE-2010-4008 ADV-2010-3046  View
86335 15331 CVE-2010-4008 ADV-2010-3076  View
86336 15331 CVE-2010-4008 ADV-2010-3100  View
86337 15331 CVE-2010-4008 ADV-2011-0230  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36741 JVNDB-2010-002521 libxml2 の XPath 表現におけるサービス運用妨害 (DoS) の脆弱性 libxml2 は、不正な形式の XPath 表現を処理中に無効なメモリ位置から読み込むため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-4008 46588 CVE-2010-4008 15331 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002521.html 2010-11-17 2016-06-30 View