Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Chrome | * | 14.0.835.163 (excluding) | |
| Red Hat Enterprise Linux 4 | RedHat | libxml2-0:2.6.16-12.9 | * |
| Red Hat Enterprise Linux 5 | RedHat | libxml2-0:2.6.26-2.1.12.el5_7.2 | * |
| Red Hat Enterprise Linux 6 | RedHat | libxml2-0:2.7.6-4.el6 | * |
| Red Hat Enterprise Linux 6 | RedHat | mingw32-libxml2-0:2.7.6-6.el6_3 | * |
| Chromium-browser | Ubuntu | lucid | * |
| Chromium-browser | Ubuntu | maverick | * |
| Chromium-browser | Ubuntu | natty | * |
| Chromium-browser | Ubuntu | oneiric | * |
| Chromium-browser | Ubuntu | upstream | * |
| Libxml2 | Ubuntu | hardy | * |
| Libxml2 | Ubuntu | lucid | * |
| Libxml2 | Ubuntu | maverick | * |
| Libxml2 | Ubuntu | natty | * |
| Libxml2 | Ubuntu | oneiric | * |
| Libxml2 | Ubuntu | upstream | * |