CVE-2010-4008

2010-11-0800:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

53.6%

JSON

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple
Safari 5.0.2 and earlier, and other products, reads from invalid memory
locations during processing of malformed XPath expressions, which allows
context-dependent attackers to cause a denial of service (application
crash) via a crafted XML document.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlibxml2< 2.6.24.dfsg-1ubuntu1.6UNKNOWN
ubuntu8.04noarchlibxml2< 2.6.31.dfsg-2ubuntu1.5UNKNOWN
ubuntu9.10noarchlibxml2< 2.7.5.dfsg-1ubuntu1.2UNKNOWN
ubuntu10.04noarchlibxml2< 2.7.6.dfsg-1ubuntu1.1UNKNOWN
ubuntu10.10noarchlibxml2< 2.7.7.dfsg-4ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	libxml2	< 2.6.24.dfsg-1ubuntu1.6	UNKNOWN
ubuntu	8.04	noarch	libxml2	< 2.6.31.dfsg-2ubuntu1.5	UNKNOWN
ubuntu	9.10	noarch	libxml2	< 2.7.5.dfsg-1ubuntu1.2	UNKNOWN
ubuntu	10.04	noarch	libxml2	< 2.7.6.dfsg-1ubuntu1.1	UNKNOWN
ubuntu	10.10	noarch	libxml2	< 2.7.7.dfsg-4ubuntu0.1	UNKNOWN