Double Free in Apache Openoffice
CVE-2010-4494
Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
Vulnerability class: Double Free
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.5 (High). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.059 (93.0th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 93rd percentile — 93.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.075 · newest: 0.059 · change: -0.016
Affected products
Weakness classification (CWE)
References
- www.mandriva.com/security/advisories (vendor-advisory, Third Party Advisory)
- secunia.com/advisories/40775 (Third Party Advisory, third-party-advisory)
- support.apple.com/kb/HT4564 (Third Party Advisory)
- www.vupen.com/english/advisories/2010/3336 (Third Party Advisory, vdb-entry)
- www.vupen.com/english/advisories/2011/0230 (Third Party Advisory, vdb-entry)
- www.debian.org/security/2010/dsa-2137 (vendor-advisory, Third Party Advisory)
- rhn.redhat.com/errata/RHSA-2013-0217.html (vendor-advisory, Third Party Advisory)
- support.apple.com/kb/HT4566 (Broken Link)
- secunia.com/advisories/42721 (Third Party Advisory, third-party-advisory)
- www.redhat.com/support/errata/RHSA-2011-1749.html (vendor-advisory, Third Party Advisory)