Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerability · NVD

CVE-2010-4008

CVE-2010-4008, Severity pending severity (CVSS —): 5 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS)
-
Exploitation
2.7 %

EPSS, predicted over 30 days

Tracked apps
5
Still exposed
0

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.

EPSS 2.70% above median percentile 85.7%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

  • Safari macOS com.apple.Safari
    Affected <5.0.4 Fixed in 5.0.4 Latest tracked - undetermined
  • Chrome macOS com.google.Chrome
    Affected <7.0.517.44 Fixed in 7.0.517.44 Latest tracked 155.0.8059.40 patched
  • Google Chrome Windows winget:Google.Chrome
    Affected <7.0.517.44 Fixed in 7.0.517.44 Latest tracked 155.0.8059.85 patched
  • iTunes Windows winget:Apple.iTunes
    Affected <10.2 Fixed in 10.2 Latest tracked 12.13.11.1 patched
  • iTunes macOS macos:com.apple.iTunes
    Affected <10.2 Fixed in 10.2 Latest tracked - undetermined

NVD references 15 distinct products for this CVE : only those tracked by Scout (mobile and desktop catalog apps) are listed above. Libraries, servers and out-of-scope products do not appear here. Full list on NVD ↗

Vulnerable CPE configurations (5)
Vendor Product Versions
google chrome
All platforms (wildcard)
 <7.0.517.44
google chrome
All platforms (wildcard)
 <7.0.517.44
apple itunes
All platforms (wildcard)
 <10.2
apple itunes
All platforms (wildcard)
 <10.2
apple safari
All platforms (wildcard)
 <5.0.4
View on NVD ↗ Advisory · code.google.com Advisory · googlechromereleases.blogspot.com Advisory · mail.gnome.org

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM