NVD

Id
15731  
Name
CVE-2010-4476  
Description
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2011-02-17  
Modified Date
2016-08-22  
Seq
2010-4476  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
89118 15731 CVE-2010-4476 http://blog.fortify.com/blog/2011/02/08/Double-Trouble  View
89119 15731 CVE-2010-4476 http://blogs.oracle.com/security/2011/02/security_alert_for_cve-2010-44.html  View
89120 15731 CVE-2010-4476 FEDORA-2011-1231  View
89121 15731 CVE-2010-4476 FEDORA-2011-1263  View
89122 15731 CVE-2010-4476 SUSE-SA:2011:024  View
89123 15731 CVE-2010-4476 SUSE-SU-2011:0823  View
89124 15731 CVE-2010-4476 SSRT100387  View
89125 15731 CVE-2010-4476 HPSBUX02641  View
89126 15731 CVE-2010-4476 HPSBUX02645  View
89127 15731 CVE-2010-4476 HPSBUX02642  View
89128 15731 CVE-2010-4476 HPSBOV02634  View
89129 15731 CVE-2010-4476 HPSBTU02684  View
89130 15731 CVE-2010-4476 SSRT100415  View
89131 15731 CVE-2010-4476 SSRT100569  View
89132 15731 CVE-2010-4476 SSRT100627  View
89133 15731 CVE-2010-4476 SSRT100825  View
89134 15731 CVE-2010-4476 SSRT100854  View
89135 15731 CVE-2010-4476 SSRT100867  View
89136 15731 CVE-2010-4476 HPSBUX02860  View
89137 15731 CVE-2010-4476 oval:org.mitre.oval:def:12662  View
89138 15731 CVE-2010-4476 oval:org.mitre.oval:def:12745  View
89139 15731 CVE-2010-4476 oval:org.mitre.oval:def:14328  View
89140 15731 CVE-2010-4476 oval:org.mitre.oval:def:14589  View
89141 15731 CVE-2010-4476 oval:org.mitre.oval:def:19493  View
89142 15731 CVE-2010-4476 GLSA-201406-32  View
89143 15731 CVE-2010-4476 http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html  View
89144 15731 CVE-2010-4476 IZ94423  View
89145 15731 CVE-2010-4476 PM31983  View
89146 15731 CVE-2010-4476 http://www-01.ibm.com/support/docview.wss?uid=swg21468358  View
89147 15731 CVE-2010-4476 DSA-2161  View
89148 15731 CVE-2010-4476 http://www.exploringbinary.com/java-hangs-when-converting-2-2250738585072012e-308/  View
89149 15731 CVE-2010-4476 http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.html  View
89150 15731 CVE-2010-4476 http://www.ibm.com/support/docview.wss?uid=swg24029497  View
89151 15731 CVE-2010-4476 http://www.ibm.com/support/docview.wss?uid=swg24029498  View
89152 15731 CVE-2010-4476 MDVSA-2011:054  View
89153 15731 CVE-2010-4476 http://www.oracle.com/technetwork/topics/security/alert-cve-2010-4476-305811.html  View
89154 15731 CVE-2010-4476 http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html  View
89155 15731 CVE-2010-4476 http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html  View
89156 15731 CVE-2010-4476 RHSA-2011:0210  View
89157 15731 CVE-2010-4476 RHSA-2011:0211  View
89158 15731 CVE-2010-4476 RHSA-2011:0212  View
89159 15731 CVE-2010-4476 RHSA-2011:0213  View
89160 15731 CVE-2010-4476 RHSA-2011:0214  View
89161 15731 CVE-2010-4476 RHSA-2011:0282  View
89162 15731 CVE-2010-4476 RHSA-2011:0333  View
89163 15731 CVE-2010-4476 RHSA-2011:0334  View
89164 15731 CVE-2010-4476 RHSA-2011:0880  View
89165 15731 CVE-2010-4476 1025062  View
89166 15731 CVE-2010-4476 ADV-2011-0365  View
89167 15731 CVE-2010-4476 ADV-2011-0377  View
89168 15731 CVE-2010-4476 ADV-2011-0379  View
89169 15731 CVE-2010-4476 ADV-2011-0422  View
89170 15731 CVE-2010-4476 ADV-2011-0434  View
89171 15731 CVE-2010-4476 ADV-2011-0605  View
89172 15731 CVE-2010-4476 SSRT100390  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30668 JVNDB-2011-000016 IBM DB2 におけるサービス運用妨害 (DoS) の脆弱性 IBM DB2 には、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2010-4476 47056 CVE-2010-4476 15731 4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000016.html 2011-03-04 2013-03-26 View
30669 JVNDB-2011-000017 IBM WebSphere Application Server におけるサービス運用妨害 (DoS) の脆弱性 IBM WebSphere Application Server (WAS) には、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2010-4476 47056 CVE-2010-4476 15731 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000017.html 2011-03-04 2013-03-26 View
30670 JVNDB-2011-000018 IBM Lotus におけるサービス運用妨害 (DoS) の脆弱性 IBM Lotus 製品群には、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2010-4476 47056 CVE-2010-4476 15731 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000018.html 2011-03-04 2013-03-26 View
30672 JVNDB-2011-000020 IBM Tivoli 製品におけるサービス運用妨害 (DoS) の脆弱性 IBM Tivoli 製品には、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2010-4476 47056 CVE-2010-4476 15731 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000020.html 2011-03-10 2013-03-14 View
30946 JVNDB-2011-001185 複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性 複数の Oracle 製品の Java Runtime Environment コンポーネントには、Java 言語 および APIs の処理に関して不備があるため、可用性に影響のある脆弱性が存在します。 CVE-2010-4476 47056 CVE-2010-4476 15731 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001185.html 2011-02-08 2013-05-24 View