CVE:CVE-2010-4494
CNNVD:CNNVD-201012-090
Libxml2是GNOME项目组所研发的一个基于C语言的用来解析XML文档的函数库，它支持多种编码格式、Xpath解析、Well-formed和valid验证等。
在Google Chrome 8.0.552.215之前版本中使用的libxml2 2.7.8及其他版本中存在双重释放漏洞。远程攻击者可借助与XPath处理有关的向量导致拒绝服务或可能产生其他未明影响。
solution:Upgrade google chrome to a higher version than 8.0.552.215,and avoid the version (,8.0.552.215); Upgrade xmlsoft libxml2 to a higher version than 2.7.8,and avoid the version (,2.7.8]; Upgrade apple itunes to a higher version than 10.2,and avoid the version (,10.2); Upgrade apple safari to a higher version than 5.0.4,and avoid the version (,5.0.4); Upgrade apple iphone_os to a higher version than 4.3.0,and avoid the version (,4.3.0); Upgrade apple mac_os_x to a higher version than 10.6.7,and avoid the version (,10.6.7); Upgrade opensuse opensuse to a higher version than 11.2,11.3,and avoid the version 11.2,11.3; Upgrade suse suse_linux_enterprise_server to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade fedoraproject fedora to a higher version than 14,and avoid the version 14; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.3,and avoid the version 6.3; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0; Upgrade debian debian_linux to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade hp insight_control_server_deployment to a higher version than *; Upgrade hp rapid_deployment_pack to a higher version than *; Upgrade apache openoffice to a higher version than 2.4.3,3.3.0,and avoid the version [2.1.0,2.4.3],[3.0.0,3.3.0)