CVE-2010-4476
published 2011-02-17CVE-2010-4476: The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and…
PriorityP339medium5CVSS 2.0
AVNACLAuNCNINAP
EXPLOIT
EPSS
23.49%
97.5th percentile
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Affected
68 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sun | jdk | <= 1.6.0 | — |
| sun | jdk | <= 1.5.0 | — |
| sun | jdk | — | — |
| sun | jdk | — | — |
| sun | jre | <= 1.6.0 | — |
| sun | jre | <= 1.5.0 | — |
| sun | jre | <= 1.4.2_29 | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
| sun | jre | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_redhat5.0MEDIUM
vendor_ubuntu2.6LOW
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
OpenJDK 6 vulnerabilities
vendor_ubuntu·2011-03-17·CVSS 2.6
CVE-2010-4448 [LOW] OpenJDK 6 vulnerabilities
Title: OpenJDK 6 vulnerabilities
Summary: OpenJDK 6 vulnerabilities in Ubuntu 10.10 for armel (ARM) architecture.
USN-1079-2 fixed vulnerabilities in OpenJDK 6 for armel (ARM)
architectures in Ubuntu 9.10 and Ubuntu 10.04 LTS. This update fixes
vulnerabilities in OpenJDK 6 for armel (ARM) architectures for Ubuntu
10.10.
Original advisory details:
It was discovered that untrusted Java applets could create domain
name resolution cache entries, allowing an attacker to manipulate
name resolution within the JVM. (CVE-2010-4448)
It was discovered that the Java launcher did not did not properly
setup the LD_LIBRARY_PATH environment variable. A local attacker
could exploit this to execute arbitrary code as the user invoking
the program. (CVE-2010-4450)
It was discovered that within the Swing
Ubuntu
OpenJDK 6 vulnerabilities
vendor_ubuntu·2011-03-15·CVSS 2.6
CVE-2010-4448 [LOW] OpenJDK 6 vulnerabilities
Title: OpenJDK 6 vulnerabilities
Summary: OpenJDK 6 Vulnerabilities (armel packages only)
USN-1079-1 fixed vulnerabilities in OpenJDK 6 for non-armel (ARM)
architectures. This update provides the corresponding updates for
OpenJDK 6 for use with the armel (ARM) architectures.
In order to build the armel (ARM) OpenJDK 6 update for Ubuntu 10.04
LTS, it was necessary to rebuild binutils and gcj-4.4 from Ubuntu
10.04 LTS updates.
Original advisory details:
It was discovered that untrusted Java applets could create domain
name resolution cache entries, allowing an attacker to manipulate
name resolution within the JVM. (CVE-2010-4448)
It was discovered that the Java launcher did not did not properly
setup the LD_LIBRARY_PATH environment variable. A local attacker
could exploit this to execu
Ubuntu
OpenJDK 6 vulnerabilities
vendor_ubuntu·2011-03-01·CVSS 2.6
CVE-2010-4448 [LOW] OpenJDK 6 vulnerabilities
Title: OpenJDK 6 vulnerabilities
It was discovered that untrusted Java applets could create domain
name resolution cache entries, allowing an attacker to manipulate
name resolution within the JVM. (CVE-2010-4448)
It was discovered that the Java launcher did not did not properly
setup the LD_LIBRARY_PATH environment variable. A local attacker
could exploit this to execute arbitrary code as the user invoking
the program. (CVE-2010-4450)
It was discovered that within the Swing library, forged timer events
could allow bypass of SecurityManager checks. This could allow an
attacker to access restricted resources. (CVE-2010-4465)
It was discovered that certain bytecode combinations confused memory
management within the HotSpot JVM. This could allow an attacker to
cause a denial of service thr
Red Hat
JDK Double.parseDouble Denial-Of-Service
vendor_redhat·2011-02-01·CVSS 5.0
CVE-2010-4476 [MEDIUM] JDK Double.parseDouble Denial-Of-Service
JDK Double.parseDouble Denial-Of-Service
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
OSV
Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment
osv·2022-05-14
CVE-2010-4476 [MEDIUM] Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment
Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment
The `Double.parseDouble` method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Apache Tomcat introduced workarounds to avoid being affected by this issue in versions 7.0.7, 6.0.32, and 5.5.33.
GHSA
Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment
ghsa·2022-05-14
CVE-2010-4476 [MEDIUM] Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment
Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment
The `Double.parseDouble` method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Apache Tomcat introduced workarounds to avoid being affected by this issue in versions 7.0.7, 6.0.32, and 5.5.33.
No detection rules found.
http://blog.fortify.com/blog/2011/02/08/Double-Troublehttp://blogs.oracle.com/security/2011/02/security_alert_for_cve-2010-44.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-February/053926.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-February/053934.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.htmlhttp://marc.info/?l=bugtraq&m=129899347607632&w=2http://marc.info/?l=bugtraq&m=129960314701922&w=2http://marc.info/?l=bugtraq&m=130168502603566&w=2http://marc.info/?l=bugtraq&m=130270785502599&w=2http://marc.info/?l=bugtraq&m=130497132406206&w=2http://marc.info/?l=bugtraq&m=130497185606818&w=2http://marc.info/?l=bugtraq&m=130514352726432&w=2http://marc.info/?l=bugtraq&m=131041767210772&w=2http://marc.info/?l=bugtraq&m=132215163318824&w=2http://marc.info/?l=bugtraq&m=133469267822771&w=2http://marc.info/?l=bugtraq&m=133728004526190&w=2http://marc.info/?l=bugtraq&m=134254866602253&w=2http://marc.info/?l=bugtraq&m=134254957702612&w=2http://marc.info/?l=bugtraq&m=136485229118404&w=2http://secunia.com/advisories/43048http://secunia.com/advisories/43280http://secunia.com/advisories/43295http://secunia.com/advisories/43304http://secunia.com/advisories/43333http://secunia.com/advisories/43378http://secunia.com/advisories/43400http://secunia.com/advisories/43659http://secunia.com/advisories/44954http://secunia.com/advisories/45022http://secunia.com/advisories/45555http://secunia.com/advisories/49198http://security.gentoo.org/glsa/glsa-201406-32.xmlhttp://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.htmlhttp://www-01.ibm.com/support/docview.wss?uid=swg1IZ94423http://www-01.ibm.com/support/docview.wss?uid=swg1PM31983http://www-01.ibm.com/support/docview.wss?uid=swg21468358http://www.debian.org/security/2011/dsa-2161http://www.exploringbinary.com/java-hangs-when-converting-2-2250738585072012e-308/http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.htmlhttp://www.ibm.com/support/docview.wss?uid=swg24029497http://www.ibm.com/support/docview.wss?uid=swg24029498http://www.mandriva.com/security/advisories?name=MDVSA-2011:054http://www.oracle.com/technetwork/topics/security/alert-cve-2010-4476-305811.htmlhttp://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.htmlhttp://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0210.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0211.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0212.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0213.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0214.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0282.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0333.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0334.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0880.htmlhttp://www.securitytracker.com/id?1025062http://www.vupen.com/english/advisories/2011/0365http://www.vupen.com/english/advisories/2011/0377http://www.vupen.com/english/advisories/2011/0379http://www.vupen.com/english/advisories/2011/0422http://www.vupen.com/english/advisories/2011/0434http://www.vupen.com/english/advisories/2011/0605http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02720715&admit=109447627+1298159618320+28353475https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12662https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12745https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14328https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14589https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19493http://blog.fortify.com/blog/2011/02/08/Double-Troublehttp://blogs.oracle.com/security/2011/02/security_alert_for_cve-2010-44.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-February/053926.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-February/053934.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.htmlhttp://marc.info/?l=bugtraq&m=129899347607632&w=2http://marc.info/?l=bugtraq&m=129960314701922&w=2http://marc.info/?l=bugtraq&m=130168502603566&w=2http://marc.info/?l=bugtraq&m=130270785502599&w=2http://marc.info/?l=bugtraq&m=130497132406206&w=2http://marc.info/?l=bugtraq&m=130497185606818&w=2http://marc.info/?l=bugtraq&m=130514352726432&w=2http://marc.info/?l=bugtraq&m=131041767210772&w=2http://marc.info/?l=bugtraq&m=132215163318824&w=2http://marc.info/?l=bugtraq&m=133469267822771&w=2http://marc.info/?l=bugtraq&m=133728004526190&w=2http://marc.info/?l=bugtraq&m=134254866602253&w=2http://marc.info/?l=bugtraq&m=134254957702612&w=2http://marc.info/?l=bugtraq&m=136485229118404&w=2http://secunia.com/advisories/43048http://secunia.com/advisories/43280http://secunia.com/advisories/43295http://secunia.com/advisories/43304http://secunia.com/advisories/43333http://secunia.com/advisories/43378http://secunia.com/advisories/43400http://secunia.com/advisories/43659http://secunia.com/advisories/44954http://secunia.com/advisories/45022http://secunia.com/advisories/45555http://secunia.com/advisories/49198
+ 36 more references
2011-02-17
Published