CVE-2010-4494: apache openoffice Double Free

Modified

AliasesDEBIAN-CVE-2010-4494DSA-2137-1

Published 07-12-2010Last modified 07-08-2024

Vulnerability summary

CVE-2010-4494 is a high (CVSS 7.5) Double Free vulnerability in apache openoffice. EPSS estimates a 5.93% chance of exploitation in the next 30 days, higher than 93.2% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritisepublic exploit

Public exploit (reference, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

5.93%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 3 · Related 1

OPENSUSE-SU-2024:10192-1 RHSA-2011:1749 RHSA-2013:0217

Timeline

07-12-2010
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

5.93%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

No change 0.00 pp

From 5.93% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-415Double FreeThe product calls free() twice on the same memory address.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Apple4 products

iphone_os< 4.3.0
itunes< 10.2
mac_os_x< 10.6.7
safari< 5.0.4

Redhat4 products

Debian2 products

libxml2< 2.6.32.dfsg-5+lenny3 | < 2.7.8.dfsg-2
debian_linuxEOL5.0 | 6.0

Apache1 product

openoffice≥ 2.1.0, ≤ 2.4.3 | ≥ 3.0.0, < 3.3.0

Fedoraproject1 product

fedoraEOL14

Google1 product

chrome< 8.0.552.215

Opensuse1 product

opensuseEOL11.2 | 11.3

Suse1 product

suse_linux_enterprise_server11:sp1

Xmlsoft1 product

libxml2≤ 2.7.8

9 vendors · 16 products

References

27 links

www.mandriva.com/security/advisories?name=MDVSA-2010:260Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/40775Third Party AdvisoryX Refsource SECUNIA
support.apple.com/kb/HT4564X Refsource CONFIRMThird Party Advisory
www.vupen.com/english/advisories/2010/3336VDB EntryX Refsource VUPENThird Party Advisory
www.vupen.com/english/advisories/2011/0230VDB EntryX Refsource VUPENThird Party Advisory
www.debian.org/security/2010/dsa-2137Vendor AdvisoryX Refsource DEBIANThird Party Advisory
rhn.redhat.com/errata/RHSA-2013-0217.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
support.apple.com/kb/HT4566X Refsource CONFIRMBroken Link
secunia.com/advisories/42721Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2011-1749.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory

Show all 27 references

lists.apple.com/archives/security-announce/2011/Mar/msg00006.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
lists.apple.com/archives/security-announce/2011/Mar/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
www.openoffice.org/security/cves/CVE-2010-4008_CVE-2010-4494.htmlX Refsource CONFIRMThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2011-March/055775.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
lists.apple.com/archives/security-announce/2011//Mar/msg00003.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
secunia.com/advisories/42472Third Party AdvisoryX Refsource SECUNIA
code.google.com/p/chromium/issues/detail?id=63444X Refsource CONFIRMExploitIssue TrackingPatchVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11916VDB EntrySignatureX Refsource OVALThird Party Advisory
support.apple.com/kb/HT4554X Refsource CONFIRMThird Party Advisory
lists.apple.com/archives/security-announce/2011//Mar/msg00004.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
secunia.com/advisories/42762Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2010/3319VDB EntryX Refsource VUPENThird Party Advisory
marc.info?l=bugtraq&m=139447903326211&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates.htmlX Refsource CONFIRMVendor Advisory
support.apple.com/kb/HT4581X Refsource CONFIRMThird Party Advisory
security-tracker.debian.org/tracker/CVE-2010-4494Advisory