Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerability · NVD

CVE-2010-4008

CVE-2010-4008, Severity pending severity (CVSS —): 4 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS)
-
Exploitation
3.1 %

EPSS, predicted over 30 days

Tracked apps
4
Still exposed
0

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.

EPSS 3.13% above median percentile 87.0%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

  • Safari macOS com.apple.Safari
    Affected <5.0.4 Fixed in 5.0.4 Latest tracked - undetermined
  • Chrome macOS com.google.Chrome
    Affected <7.0.517.44 Fixed in 7.0.517.44 Latest tracked - undetermined
  • Google Chrome Windows winget:Google.Chrome
    Affected <7.0.517.44 Fixed in 7.0.517.44 Latest tracked 152.0.7977.65 patched
  • iTunes Windows winget:Apple.iTunes
    Affected <10.2 Fixed in 10.2 Latest tracked 12.13.10.3 patched

NVD references 15 distinct products for this CVE : only those tracked by Scout (mobile and desktop catalog apps) are listed above. Libraries, servers and out-of-scope products do not appear here. Full list on NVD ↗

Vulnerable CPE configurations (5)
Vendor Product Versions
google chrome
All platforms (wildcard)
 <7.0.517.44
google chrome
All platforms (wildcard)
 <7.0.517.44
apple itunes
All platforms (wildcard)
 <10.2
apple itunes
All platforms (wildcard)
 <10.2
apple safari
All platforms (wildcard)
 <5.0.4
View on NVD ↗ Advisory · code.google.com Advisory · googlechromereleases.blogspot.com Advisory · mail.gnome.org