Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-4008
HistoryNov 17, 2010 - 1:00 a.m.

CVE-2010-4008

2010-11-1701:00:02
CWE-119
[email protected]
web.nvd.nist.gov
43
libxml2
vulnerability
cve-2010-4008
google chrome
apple safari
xpath
denial of service
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.4%

JSON

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.

Affected configurations

NVD
Node
googlechromeRange<7.0.517.44
Node
appleitunesRange<10.2
OR
applesafariRange<5.0.4
OR
appleiphone_osRange<4.2
OR
applemac_os_xRange<10.6.7
Node
xmlsoftlibxml2Range<2.7.8
Node
debiandebian_linuxMatch5.0
OR
debiandebian_linuxMatch6.0
Node
canonicalubuntu_linuxMatch6.06lts
OR
canonicalubuntu_linuxMatch8.04lts
OR
canonicalubuntu_linuxMatch9.10
OR
canonicalubuntu_linuxMatch10.04lts
OR
canonicalubuntu_linuxMatch10.10
Node
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_serverMatch6.0
OR
redhatenterprise_linux_server_eusMatch6.3
OR
redhatenterprise_linux_workstationMatch6.0
Node
opensuseopensuseMatch11.1
OR
opensuseopensuseMatch11.2
OR
opensuseopensuseMatch11.3
OR
susesuse_linux_enterprise_serverMatch10sp3
OR
susesuse_linux_enterprise_serverMatch11-
OR
susesuse_linux_enterprise_serverMatch11sp1
Node
apacheopenofficeRange2.0.0–2.4.3
OR
apacheopenofficeRange3.0.0–3.3.0
CPENameOperatorVersion
google:chromegoogle chromelt7.0.517.44

References

Related

nessus 39
openvas 34
ubuntucve 1
cvelist 1
prion 2
nvd 2
securityvulns 11
ubuntu 1
osv 1
debiancve 1
veracode 1
debian 2
cve 1
gentoo 1
oraclelinux 3
redhat 4
centos 2
vmware 4
freebsd 1
tenable 1
nessus
nessus
Debian DSA-2128-1 : libxml2 - invalid memory access
2010-12-02 00:00:00
Oracle Solaris Third-Party Patch Update : libxml2 (cve_2010_4008_denial_of)
2015-01-19 00:00:00
Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : libxml2 vulnerability (USN-1016-1)
2010-11-11 00:00:00
openvas
openvas
Apple Safari libxml Denial of Service Vulnerability
2010-11-23 00:00:00
Debian: Security Advisory (DSA-2128-1)
2023-03-08 00:00:00
Ubuntu: Security Advisory (USN-1016-1)
2010-11-16 00:00:00
ubuntucve
ubuntucve
CVE-2010-4008
2010-11-08 00:00:00
cvelist
cvelist
CVE-2010-4008
2010-11-16 23:00:00
prion
prion
Design/Logic Flaw
2010-11-17 01:00:00
Design/Logic Flaw
2010-11-06 00:00:00
nvd
nvd
CVE-2010-4008
2010-11-17 01:00:02
CVE-2010-4200
2010-11-06 00:00:02
securityvulns
securityvulns
libxml2 memory corruption
2010-11-15 00:00:00
[USN-1016-1] libxml2 vulnerability
2010-11-15 00:00:00
HP System Management Homepage multiple security vulnerabilities
2011-04-26 00:00:00
ubuntu
ubuntu
libxml2 vulnerability
2010-11-10 00:00:00
osv
osv
libxml2 - potential code execution
2010-12-01 00:00:00
debiancve
debiancve
CVE-2010-4008
2010-11-17 01:00:02
veracode
veracode
Denial Of Service (Dos)
2019-01-15 08:55:09
debian
debian
[SECURITY] [DSA-2128-1] New libxml2 packages fix potential code execution
2010-12-01 20:15:40
[SECURITY] [DSA-2128-1] New libxml2 packages fix potential code execution
2010-12-01 20:15:40
cve
cve
CVE-2010-4200
2010-11-06 00:00:02
gentoo
gentoo
libxml2: Multiple vulnerabilities
2011-10-26 00:00:00
oraclelinux
oraclelinux
libxml2 security and bug fix update
2011-12-14 00:00:00
libxml2 security update
2012-01-11 00:00:00
mingw32-libxml2 security update
2013-01-31 00:00:00
redhat
redhat
(RHSA-2012:0017) Important: libxml2 security update
2012-01-11 00:00:00
(RHSA-2011:1749) Low: libxml2 security and bug fix update
2011-12-06 00:00:00
(RHSA-2013:0217) Important: mingw32-libxml2 security update
2013-01-31 00:00:00
centos
centos
libxml2 security update
2012-01-11 19:19:14
mingw32 security update
2013-02-01 00:53:30
vmware
vmware
VMware ESXi update to third party library
2012-07-12 00:00:00
VMware ESX updates to ESX Service Console
2012-04-26 00:00:00
VMware ESXi update to third party library
2012-07-12 00:00:00
freebsd
freebsd
openoffice.org -- Multiple vulnerabilities
2010-08-04 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.4%

JSON
Related for CVE-2010-4008
nessus39openvas34ubuntucve1cvelist1prion2nvd2securityvulns11ubuntu1osv1debiancve1veracode1debian2cve1gentoo1oraclelinux3redhat4centos2vmware4freebsd1tenable1