Vulnerability in Sun Jdk
CVE-2010-4476
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products…
EPSS: 0.235 (97.5th percentile) — read the EPSS interpretation.
Affected products
Public proof-of-concept exploits
References
- secalert_us@oracle.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert_us@oracle.com (vdb-entry, x_refsource_SECTRACK)
- secalert_us@oracle.com (x_refsource_CONFIRM)
- secalert_us@oracle.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert_us@oracle.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- secalert_us@oracle.com (vendor-advisory, x_refsource_GENTOO)
- secalert_us@oracle.com (signature, x_refsource_OVAL, vdb-entry)
- secalert_us@oracle.com (x_refsource_HP, vendor-advisory)
- secalert_us@oracle.com (vendor-advisory, x_refsource_FEDORA)
Frequently asked questions
- What is CVE-2010-4476?
- CVE-2010-4476 is a vulnerability in Sun Jdk. Published 2011-02-17.
- Is CVE-2010-4476 known to be exploited?
- 6 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.