CVE ID:	CVE-2010-4008
Description:	libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.
Test IDs:	1.3.6.1.4.1.25623.1.0.122013   1.3.6.1.4.1.25623.1.1.1.1.2010.2128   1.3.6.1.4.1.25623.1.0.840535   1.3.6.1.4.1.25623.1.0.70656   1.3.6.1.4.1.25623.1.0.870741   1.3.6.1.4.1.25623.1.0.68571   1.3.6.1.4.1.25623.1.0.881182   1.3.6.1.4.1.25623.1.0.70489   1.3.6.1.4.1.25623.1.0.68484   1.3.6.1.4.1.25623.1.0.870527   1.3.6.1.4.1.25623.1.0.801638
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4008 http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html BugTraq ID: 44779 http://www.securityfocus.com/bid/44779 Debian Security Information: DSA-2128 (Google Search) http://www.debian.org/security/2010/dsa-2128 HPdes Security Advisory: HPSBGN02970 http://marc.info/?l=bugtraq&m=139447903326211&w=2 HPdes Security Advisory: HPSBMA02662 http://marc.info/?l=bugtraq&m=130331363227777&w=2 HPdes Security Advisory: SSRT100409 http://marc.info/?l=bugtraq&m=130331363227777&w=2 http://www.mandriva.com/security/advisories?name=MDVSA-2010:243 http://blog.bkis.com/en/libxml2-vulnerability-in-google-chrome-and-apple-safari/ http://mail.gnome.org/archives/xml/2010-November/msg00015.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12148 RedHat Security Advisories: RHSA-2011:1749 http://www.redhat.com/support/errata/RHSA-2011-1749.html RedHat Security Advisories: RHSA-2013:0217 http://rhn.redhat.com/errata/RHSA-2013-0217.html http://secunia.com/advisories/40775 http://secunia.com/advisories/42109 http://secunia.com/advisories/42175 http://secunia.com/advisories/42314 http://secunia.com/advisories/42429 SuSE Security Announcement: SUSE-SR:2010:023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html http://www.ubuntu.com/usn/USN-1016-1 http://www.vupen.com/english/advisories/2010/3046 http://www.vupen.com/english/advisories/2010/3076 http://www.vupen.com/english/advisories/2010/3100 http://www.vupen.com/english/advisories/2011/0230