CVE-2010-4008: Buffer Overflow
libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4008?
CVE-2010-4008 has a severity rating that indicates it could lead to a denial of service due to application crashes.
How do I fix CVE-2010-4008?
To fix CVE-2010-4008, update the affected software to versions higher than libxml2 2.7.8, Google Chrome 7.0.517.44, and Apple Safari 5.0.2.
What products are affected by CVE-2010-4008?
CVE-2010-4008 affects multiple products, including Google Chrome, Apple Safari, Apple iTunes, and libxml2 prior to 2.7.8.
Can CVE-2010-4008 cause data loss?
CVE-2010-4008 primarily causes application crashes, which can lead to data loss if unsaved work is present at the time of the crash.
Is there a workaround for CVE-2010-4008?
There is no officially recommended workaround for CVE-2010-4008 aside from applying the necessary software updates.