CVE-2010-4008

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations…

published November 16, 2010

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02703 · 85.8th percentile
Published
2010-11-16T23:00Z
EPSS history
Timeline
  • 16 NOV 23:00Z
    libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations…
    cvelistv5