CVE Feed

Dashboard / CVE / CVE-2010-4476

CVE-2010-4476

The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.

Published:Feb 1, 2011

Last Modified:Apr 11, 2025

EPS:Feb 17, 2011

EPSS Score:0.40994

CVSS Score:5

Affected Products

Vendor

Product

Action

Vendor

Redhat

Product

Enterprise Linux

Redhat

Enterprise Linux

Vendor

Redhat

Product

Jboss Enterprise Application Platform

Redhat

Jboss Enterprise Application Platform

Vendor

Redhat

Product

Jboss Enterprise Portal Platform

Redhat

Jboss Enterprise Portal Platform

Vendor

Redhat

Product

Jboss Enterprise Web Platform

Redhat

Jboss Enterprise Web Platform

Vendor

Redhat

Product

Jboss Enterprise Web Server

Redhat

Jboss Enterprise Web Server

Vendor

Redhat

Product

Jboss Soa Platform

Redhat

Jboss Soa Platform

Vendor

Redhat

Product

Network Satellite

Redhat

Network Satellite

Vendor

Redhat

Product

Rhel Extras

Redhat

Rhel Extras

Vendor

Redhat

Product

Rhel Extras Sap

Redhat

Rhel Extras Sap

Vendor

Sun

Product

Jdk

Sun

Jdk

Vendor

Sun

Product

Jre

Sun

Jre

Vendor

Sun

Product

Sdk

Sun

Sdk

Exploits

https://www.exploit-db.com/exploits/35304 https://github.com/grzegorzblaszczyk/CVE-2010-4476-check

Common Weakness Enumeration

No CWE recorded yet

Common Attack Pattern Enumeration and Classification (CAPEC)

No CAPEC recorded yet

Related CVEs

CVE-2026-77159 (CVSS 5.5) — A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a pat…

CVE-2026-88914 (CVSS 4.4) — A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV…

CVE-2026-84828 (CVSS 6.5) — A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership in the 'haclient' g…

CVE-2026-88859 (CVSS 6.3) — A flaw was found in Evolution. A remote attacker can exploit this vulnerability by sending a specially crafted…

CVE-2026-18147 (CVSS 8.1) — A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS)…

CVE-2026-87853 (CVSS 7.5) — A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC…

CVE-2026-88924 (CVSS 7) — A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newl…

CVE-2026-87876 (CVSS 3) — Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's sc…

CVE-2026-87875 (CVSS 4.3) — The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the en…

CVE-2026-87766 (CVSS 8.8) — A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can fol…

References

http://blog.fortify.com/blog/2011/02/08/Double-Trouble

http://blogs.oracle.com/security/2011/02/security_alert_for_cve-2010-44.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053926.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053934.html

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html

http://marc.info/?l=bugtraq&m=129899347607632&w=2

http://marc.info/?l=bugtraq&m=129960314701922&w=2

http://marc.info/?l=bugtraq&m=130168502603566&w=2

http://marc.info/?l=bugtraq&m=130270785502599&w=2

http://marc.info/?l=bugtraq&m=130497132406206&w=2

http://marc.info/?l=bugtraq&m=130497185606818&w=2

http://marc.info/?l=bugtraq&m=130514352726432&w=2

http://marc.info/?l=bugtraq&m=131041767210772&w=2

http://marc.info/?l=bugtraq&m=132215163318824&w=2

http://marc.info/?l=bugtraq&m=133469267822771&w=2

http://marc.info/?l=bugtraq&m=133728004526190&w=2

http://marc.info/?l=bugtraq&m=134254866602253&w=2

http://marc.info/?l=bugtraq&m=134254957702612&w=2

http://marc.info/?l=bugtraq&m=136485229118404&w=2

http://secunia.com/advisories/43048

http://secunia.com/advisories/43280

http://secunia.com/advisories/43295

http://secunia.com/advisories/43304

http://secunia.com/advisories/43333

http://secunia.com/advisories/43378

http://secunia.com/advisories/43400

http://secunia.com/advisories/43659

http://secunia.com/advisories/44954

http://secunia.com/advisories/45022

http://secunia.com/advisories/45555

http://secunia.com/advisories/49198

http://security.gentoo.org/glsa/glsa-201406-32.xml

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ94423

http://www-01.ibm.com/support/docview.wss?uid=swg1PM31983

http://www-01.ibm.com/support/docview.wss?uid=swg21468358

http://www.debian.org/security/2011/dsa-2161

http://www.exploringbinary.com/java-hangs-when-converting-2-2250738585072012e-308/

http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.html

http://www.ibm.com/support/docview.wss?uid=swg24029497

http://www.ibm.com/support/docview.wss?uid=swg24029498

http://www.mandriva.com/security/advisories?name=MDVSA-2011:054

http://www.oracle.com/technetwork/topics/security/alert-cve-2010-4476-305811.html

http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html

http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html

http://www.redhat.com/support/errata/RHSA-2011-0210.html

http://www.redhat.com/support/errata/RHSA-2011-0211.html

http://www.redhat.com/support/errata/RHSA-2011-0212.html

http://www.redhat.com/support/errata/RHSA-2011-0213.html

http://www.redhat.com/support/errata/RHSA-2011-0214.html

http://www.redhat.com/support/errata/RHSA-2011-0282.html

http://www.redhat.com/support/errata/RHSA-2011-0333.html

http://www.redhat.com/support/errata/RHSA-2011-0334.html

http://www.redhat.com/support/errata/RHSA-2011-0880.html

http://www.securitytracker.com/id?1025062

http://www.vupen.com/english/advisories/2011/0365

http://www.vupen.com/english/advisories/2011/0377

http://www.vupen.com/english/advisories/2011/0379

http://www.vupen.com/english/advisories/2011/0422

http://www.vupen.com/english/advisories/2011/0434

http://www.vupen.com/english/advisories/2011/0605

http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02720715&admit=109447627+1298159618320+28353475

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12662

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12745

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14328

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14589

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19493

http://blog.fortify.com/blog/2011/02/08/Double-Trouble

http://blogs.oracle.com/security/2011/02/security_alert_for_cve-2010-44.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053926.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053934.html

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html

http://marc.info/?l=bugtraq&m=129899347607632&w=2

http://marc.info/?l=bugtraq&m=129960314701922&w=2

http://marc.info/?l=bugtraq&m=130168502603566&w=2

http://marc.info/?l=bugtraq&m=130270785502599&w=2

http://marc.info/?l=bugtraq&m=130497132406206&w=2

http://marc.info/?l=bugtraq&m=130497185606818&w=2

http://marc.info/?l=bugtraq&m=130514352726432&w=2

http://marc.info/?l=bugtraq&m=131041767210772&w=2

http://marc.info/?l=bugtraq&m=132215163318824&w=2

http://marc.info/?l=bugtraq&m=133469267822771&w=2

http://marc.info/?l=bugtraq&m=133728004526190&w=2

http://marc.info/?l=bugtraq&m=134254866602253&w=2

http://marc.info/?l=bugtraq&m=134254957702612&w=2

http://marc.info/?l=bugtraq&m=136485229118404&w=2

http://secunia.com/advisories/43048

http://secunia.com/advisories/43280

http://secunia.com/advisories/43295

http://secunia.com/advisories/43304

http://secunia.com/advisories/43333

http://secunia.com/advisories/43378

http://secunia.com/advisories/43400

http://secunia.com/advisories/43659

http://secunia.com/advisories/44954

http://secunia.com/advisories/45022

http://secunia.com/advisories/45555

http://secunia.com/advisories/49198

http://security.gentoo.org/glsa/glsa-201406-32.xml

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ94423

http://www-01.ibm.com/support/docview.wss?uid=swg1PM31983

http://www-01.ibm.com/support/docview.wss?uid=swg21468358

http://www.debian.org/security/2011/dsa-2161

http://www.exploringbinary.com/java-hangs-when-converting-2-2250738585072012e-308/

http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.html

http://www.ibm.com/support/docview.wss?uid=swg24029497

http://www.ibm.com/support/docview.wss?uid=swg24029498

http://www.mandriva.com/security/advisories?name=MDVSA-2011:054

http://www.oracle.com/technetwork/topics/security/alert-cve-2010-4476-305811.html

http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html

http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html

http://www.redhat.com/support/errata/RHSA-2011-0210.html

http://www.redhat.com/support/errata/RHSA-2011-0211.html

http://www.redhat.com/support/errata/RHSA-2011-0212.html

http://www.redhat.com/support/errata/RHSA-2011-0213.html

http://www.redhat.com/support/errata/RHSA-2011-0214.html

http://www.redhat.com/support/errata/RHSA-2011-0282.html

http://www.redhat.com/support/errata/RHSA-2011-0333.html

http://www.redhat.com/support/errata/RHSA-2011-0334.html

http://www.redhat.com/support/errata/RHSA-2011-0880.html

http://www.securitytracker.com/id?1025062

http://www.vupen.com/english/advisories/2011/0365

http://www.vupen.com/english/advisories/2011/0377

http://www.vupen.com/english/advisories/2011/0379

http://www.vupen.com/english/advisories/2011/0422

http://www.vupen.com/english/advisories/2011/0434

http://www.vupen.com/english/advisories/2011/0605

http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02720715&admit=109447627+1298159618320+28353475

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12662

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12745

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14328

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14589

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19493

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High