CVE-2010-4476
- State
- Published
- Severity
- Not scored
- Published
- Feb 17, 2011
- Updated
- Aug 7, 2024
- Reserved
- Dec 6, 2010
Description
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 43295third-party-advisory
- 1025062vdb-entry
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.html
- 43280third-party-advisory
- RHSA-2011:0210vendor-advisory
- http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
- GLSA-201406-32vendor-advisory
- oval:org.mitre.oval:def:14328vdb-entrysignature
- HPSBMU02799vendor-advisory
- FEDORA-2011-1231vendor-advisory
- FEDORA-2011-1263vendor-advisory
- SUSE-SU-2011:0823vendor-advisory
- HPSBNS02633vendor-advisory
- SSRT100387vendor-advisory
- HPSBUX02860vendor-advisory
- RHSA-2011:0214vendor-advisory
- PM31983vendor-advisory
- 45555third-party-advisory
- IZ94423vendor-advisory
- 43400third-party-advisory
- SSRT100412vendor-advisory
- HPSBMA02642vendor-advisory
- 43378third-party-advisory
- 45022third-party-advisory
- RHSA-2011:0333vendor-advisory
- ADV-2011-0422vdb-entry
- oval:org.mitre.oval:def:12662vdb-entrysignature
- http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html
- HPSBMU02690vendor-advisory
- ADV-2011-0434vdb-entry
- HPSBOV02762vendor-advisory
- oval:org.mitre.oval:def:14589vdb-entrysignature
- RHSA-2011:0213vendor-advisory
- SSRT100627vendor-advisory
- http://www.exploringbinary.com/java-hangs-when-converting-2-2250738585072012e-308/
- ADV-2011-0377vdb-entry
- 44954third-party-advisory
- HPSBOV02634vendor-advisory
- ADV-2011-0365vdb-entry
- http://blogs.oracle.com/security/2011/02/security_alert_for_cve-2010-44.html
- RHSA-2011:0880vendor-advisory
- oval:org.mitre.oval:def:12745vdb-entrysignature
- RHSA-2011:0334vendor-advisory
- RHSA-2011:0282vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21468358
- 43048third-party-advisory
- DSA-2161vendor-advisory
- ADV-2011-0379vdb-entry
- 43304third-party-advisory
- RHSA-2011:0211vendor-advisory
- SSRT100867vendor-advisory
- 49198third-party-advisory
- 43659third-party-advisory
- http://www.oracle.com/technetwork/topics/security/alert-cve-2010-4476-305811.html
- http://www.ibm.com/support/docview.wss?uid=swg24029498
- SUSE-SA:2011:024vendor-advisory
- HPSBUX02777vendor-advisory
- oval:org.mitre.oval:def:19493vdb-entrysignature
- 43333third-party-advisory
- HPSBUX02645vendor-advisory
- RHSA-2011:0212vendor-advisory
- HPSBUX02642vendor-advisory
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html
- ADV-2011-0605vdb-entry
- http://blog.fortify.com/blog/2011/02/08/Double-Trouble
- HPSBTU02684vendor-advisory
- http://www.ibm.com/support/docview.wss?uid=swg24029497
- MDVSA-2011:054vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.