libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Nov 16, 2010 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Jun 25, 2026 | Jan 5, 2024 |
| Apple Osx Airport | — | Apply OS X security update 2011-004Upgrade macOS to the latest versionApply OS X security update 2011-001 | Aug 28, 2015 | Nov 16, 2010 |
| Apple Osx Libxml | — | Upgrade macOS to the latest versionApply OS X security update 2011-001 | Dec 16, 2011 | Nov 16, 2010 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 5.0.4 | Jan 5, 2012 | Nov 16, 2010 |
| Centos_linux | — | Upgrade libxml2-pythonUpgrade mingw32-libxml2Upgrade libxml2-develUpgrade mingw32-libxml2-staticUpgrade libxml2 | Dec 1, 2016 | Nov 16, 2010 |
| Debian | — | Upgrade libxml2 | Jul 30, 2024 | Nov 17, 2010 |
| Gentoo Linux | — | Upgrade dev-libs/libxml2. | Oct 30, 2017 | Nov 16, 2010 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Aug 30, 2012 | Nov 16, 2010 |
| Oracle Solaris | — | Upgrade libxml2 to version 2.7.6-0.175.0.10.0.4.0 on Solaris 11.0 | May 29, 2017 | Nov 16, 2010 |
| Oracle_linux | — | Upgrade mingw32-libxml2-staticUpgrade libxml2-pythonUpgrade libxml2-staticUpgrade libxml2Upgrade mingw32-libxml2Upgrade libxml2-devel | Oct 16, 2024 | Nov 16, 2010 |
| Suse | — | Upgrade libxml2-x86Upgrade libxml2Upgrade libxml2-32bitUpgrade libxml2-doc | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libxml2 | Nov 8, 2024 | Nov 17, 2010 |
| Vmsa 2012 0008 | — | Upgrade VMware ESX 4.1 to build number 659051 | Aug 17, 2012 | Nov 16, 2010 |
| Vmsa 2012 0012 | — | Upgrade VMware ESXi 4.0 to build number 787047Upgrade VMware ESXi 4.1 to build number 800380Upgrade VMware ESXi 5.0 to build number 764879 | Jul 18, 2012 | Nov 16, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub