CVE-2010-4008 in Chrome
Summary
libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
10/20/2010
Disclosure
11/16/2010
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 4214 | Google Chrome memory corruption | 119 | Proof-of-Concept | Official fix | CVE-2010-4008 |