Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-4008
HistoryNov 17, 2010 - 1:00 a.m.

CVE-2010-4008

2010-11-1701:00:02
CWE-119
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.3%

JSON

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.

Affected configurations

NVD
Node
googlechromeRange<7.0.517.44
Node
appleitunesRange<10.2
OR
applesafariRange<5.0.4
OR
appleiphone_osRange<4.2
OR
applemac_os_xRange<10.6.7
Node
xmlsoftlibxml2Range<2.7.8
Node
debiandebian_linuxMatch5.0
OR
debiandebian_linuxMatch6.0
Node
canonicalubuntu_linuxMatch6.06lts
OR
canonicalubuntu_linuxMatch8.04lts
OR
canonicalubuntu_linuxMatch9.10
OR
canonicalubuntu_linuxMatch10.04lts
OR
canonicalubuntu_linuxMatch10.10
Node
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_serverMatch6.0
OR
redhatenterprise_linux_server_eusMatch6.3
OR
redhatenterprise_linux_workstationMatch6.0
Node
opensuseopensuseMatch11.1
OR
opensuseopensuseMatch11.2
OR
opensuseopensuseMatch11.3
OR
susesuse_linux_enterprise_serverMatch10sp3
OR
susesuse_linux_enterprise_serverMatch11-
OR
susesuse_linux_enterprise_serverMatch11sp1
Node
apacheopenofficeRange2.0.0–2.4.3
OR
apacheopenofficeRange3.0.0–3.3.0

References

Related

nessus 39
openvas 34
debian 2
cvelist 1
cve 2
ubuntucve 1
securityvulns 11
osv 1
veracode 1
debiancve 1
prion 2
ubuntu 1
nvd 1
gentoo 1
redhat 4
oraclelinux 3
centos 2
vmware 4
freebsd 1
tenable 1
nessus
nessus
openSUSE Security Update : libxml2 (openSUSE-SU-2010:1004-1)
2014-06-13 00:00:00
Debian DSA-2128-1 : libxml2 - invalid memory access
2010-12-02 00:00:00
Oracle Solaris Third-Party Patch Update : libxml2 (cve_2010_4008_denial_of)
2015-01-19 00:00:00
openvas
openvas
Mandriva Update for libxml2 MDVSA-2010:243 (libxml2)
2010-12-09 00:00:00
Apple Safari libxml Denial of Service Vulnerability
2010-11-23 00:00:00
Mandriva Update for libxml2 MDVSA-2010:243 (libxml2)
2010-12-09 00:00:00
debian
debian
[SECURITY] [DSA-2128-1] New libxml2 packages fix potential code execution
2010-12-01 20:15:40
[SECURITY] [DSA-2128-1] New libxml2 packages fix potential code execution
2010-12-01 20:15:40
cvelist
cvelist
CVE-2010-4008
2010-11-16 23:00:00
cve
cve
CVE-2010-4008
2010-11-17 01:00:02
CVE-2010-4200
2010-11-06 00:00:02
ubuntucve
ubuntucve
CVE-2010-4008
2010-11-08 00:00:00
securityvulns
securityvulns
[USN-1016-1] libxml2 vulnerability
2010-11-15 00:00:00
libxml2 memory corruption
2010-11-15 00:00:00
HP System Management Homepage multiple security vulnerabilities
2011-04-26 00:00:00
osv
osv
libxml2 - potential code execution
2010-12-01 00:00:00
veracode
veracode
Denial Of Service (Dos)
2019-01-15 08:55:09
debiancve
debiancve
CVE-2010-4008
2010-11-17 01:00:02
prion
prion
Design/Logic Flaw
2010-11-17 01:00:00
Design/Logic Flaw
2010-11-06 00:00:00
ubuntu
ubuntu
libxml2 vulnerability
2010-11-10 00:00:00
nvd
nvd
CVE-2010-4200
2010-11-06 00:00:02
gentoo
gentoo
libxml2: Multiple vulnerabilities
2011-10-26 00:00:00
redhat
redhat
(RHSA-2011:1749) Low: libxml2 security and bug fix update
2011-12-06 00:00:00
(RHSA-2012:0017) Important: libxml2 security update
2012-01-11 00:00:00
(RHSA-2013:0217) Important: mingw32-libxml2 security update
2013-01-31 00:00:00
oraclelinux
oraclelinux
libxml2 security and bug fix update
2011-12-14 00:00:00
libxml2 security update
2012-01-11 00:00:00
mingw32-libxml2 security update
2013-01-31 00:00:00
centos
centos
libxml2 security update
2012-01-11 19:19:14
mingw32 security update
2013-02-01 00:53:30
vmware
vmware
VMware ESXi update to third party library
2012-07-12 00:00:00
VMware ESX updates to ESX Service Console
2012-04-26 00:00:00
VMware ESXi update to third party library
2012-07-12 00:00:00
freebsd
freebsd
openoffice.org -- Multiple vulnerabilities
2010-08-04 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.3%

JSON
Related for NVD:CVE-2010-4008
nessus39openvas34debian2cvelist1cve2ubuntucve1securityvulns11osv1veracode1debiancve1prion2ubuntu1nvd1gentoo1redhat4oraclelinux3centos2vmware4freebsd1tenable1