Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-4494
HistoryDec 07, 2010 - 9:00 p.m.

CVE-2010-4494

2010-12-0721:00:09
CWE-415
[email protected]
web.nvd.nist.gov
1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.7%

JSON

Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.

Affected configurations

NVD
Node
googlechromeRange<8.0.552.215
Node
xmlsoftlibxml2Range≤2.7.8
Node
appleitunesRange<10.2
OR
applesafariRange<5.0.4
OR
appleiphone_osRange<4.3.0
OR
applemac_os_xRange<10.6.7
Node
opensuseopensuseMatch11.2
OR
opensuseopensuseMatch11.3
OR
susesuse_linux_enterprise_serverMatch11sp1
Node
fedoraprojectfedoraMatch14
Node
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_eusMatch6.3
OR
redhatenterprise_linux_serverMatch6.0
OR
redhatenterprise_linux_workstationMatch6.0
Node
debiandebian_linuxMatch5.0
OR
debiandebian_linuxMatch6.0
Node
hpinsight_control_server_deployment
OR
hprapid_deployment_pack
Node
apacheopenofficeRange2.1.0–2.4.3
OR
apacheopenofficeRange3.0.0–3.3.0

References

Related

nessus 27
openvas 29
altlinux 4
fedora 3
cvelist 1
prion 1
ubuntucve 1
debian 1
f5 1
securityvulns 9
debiancve 1
osv 1
cve 1
veracode 1
gentoo 1
redhat 2
oraclelinux 2
vmware 1
centos 1
freebsd 1
tenable 1
nessus
nessus
openSUSE Security Update : libxml2 (openSUSE-SU-2011:0255-1)
2011-05-05 00:00:00
Mandriva Linux Security Advisory : libxml2 (MDVSA-2010:260)
2011-01-28 00:00:00
Debian DSA-2137-1 : libxml2 - several vulnerabilities
2011-01-03 00:00:00
openvas
openvas
Mandriva Update for libxml2 MDVSA-2010:260 (libxml2)
2011-01-04 00:00:00
Fedora Update for libxml2 FEDORA-2011-2697
2011-03-15 00:00:00
Fedora Update for libxml2 FEDORA-2011-2699
2011-04-19 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package libxml2 version 1:2.7.8-alt3
2010-12-27 00:00:00
Security fix for the ALT Linux 5 package libxml2 version 1:2.7.8-alt3
2010-12-27 00:00:00
Security fix for the ALT Linux 10 package libxml2 version 1:2.7.8-alt3
2010-12-27 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: libxml2-2.7.8-6.fc15
2011-03-30 05:34:42
[SECURITY] Fedora 13 Update: libxml2-2.7.7-2.fc13
2011-04-14 20:57:28
[SECURITY] Fedora 14 Update: libxml2-2.7.7-3.fc14
2011-03-13 21:19:17
cvelist
cvelist
CVE-2010-4494
2010-12-07 20:00:00
prion
prion
Double free
2010-12-07 21:00:00
ubuntucve
ubuntucve
CVE-2010-4494
2010-12-07 00:00:00
debian
debian
[SECURITY] [DSA 2137-1] Security update for libxml2
2010-12-26 15:46:41
f5
f5
K51182024 : libxml2 2.7.8 vulnerability CVE-2010-4494
2020-06-17 00:00:00
securityvulns
securityvulns
libxml double free vulnerability
2010-12-28 00:00:00
[SECURITY] [DSA 2137-1] Security update for libxml2
2010-12-28 00:00:00
HP Rapid Deployment Pack / HP Insight Control Server Deployment multiple security vulnerabilities
2014-03-27 00:00:00
debiancve
debiancve
CVE-2010-4494
2010-12-07 21:00:09
osv
osv
libxml2 - several vulnerabilities
2010-12-26 00:00:00
cve
cve
CVE-2010-4494
2010-12-07 21:00:09
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:52:18
gentoo
gentoo
libxml2: Multiple vulnerabilities
2011-10-26 00:00:00
redhat
redhat
(RHSA-2011:1749) Low: libxml2 security and bug fix update
2011-12-06 00:00:00
(RHSA-2013:0217) Important: mingw32-libxml2 security update
2013-01-31 00:00:00
oraclelinux
oraclelinux
libxml2 security and bug fix update
2011-12-14 00:00:00
mingw32-libxml2 security update
2013-01-31 00:00:00
vmware
vmware
VMware ESXi update to third party library
2012-07-12 00:00:00
centos
centos
mingw32 security update
2013-02-01 00:53:30
freebsd
freebsd
openoffice.org -- Multiple vulnerabilities
2010-08-04 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.7%

JSON
Related for NVD:CVE-2010-4494
nessus27openvas29altlinux4fedora3cvelist1prion1ubuntucve1debian1f51securityvulns9debiancve1osv1cve1veracode1gentoo1redhat2oraclelinux2vmware1centos1freebsd1tenable1