CVE-2010-4476 Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment
MediumCVSS 5.0
EPSS 23.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.tomcat/tomcat(Maven) | >= 7.0.0, < 7.0.7 | 7.0.7 |
| org.apache.tomcat/tomcat(Maven) | >= 6.0.0, < 6.0.32 | 6.0.32 |
| org.apache.tomcat/tomcat(Maven) | >= 5.5.0, < 5.5.33 | 5.5.33 |
| sun jre | <= 1.6.0 | No fix listed |
| sun jre | = 1.6.0 | No fix listed |
| sun jre | = 1.6.0-update_1 | No fix listed |
| sun jre | = 1.6.0-update_10 | No fix listed |
| sun jre | = 1.6.0-update_11 | No fix listed |
| sun jre | = 1.6.0-update_12 | No fix listed |
| sun jre | = 1.6.0-update_13 | No fix listed |
| sun jre | = 1.6.0-update_14 | No fix listed |
| sun jre | = 1.6.0-update_15 | No fix listed |
| sun jre | = 1.6.0-update_16 | No fix listed |
| sun jre | = 1.6.0-update_17 | No fix listed |
| sun jre | = 1.6.0-update_18 | No fix listed |
| sun jre | = 1.6.0-update_19 | No fix listed |
| sun jre | = 1.6.0-update_2 | No fix listed |
| sun jre | = 1.6.0-update_20 | No fix listed |
| sun jre | = 1.6.0-update_21 | No fix listed |
| sun jre | = 1.6.0-update_22 | No fix listed |
| sun jre | = 1.6.0-update_3 | No fix listed |
| sun jre | = 1.6.0-update_4 | No fix listed |
| sun jre | = 1.6.0-update_5 | No fix listed |
| sun jre | = 1.6.0-update_6 | No fix listed |
| sun jre | = 1.6.0-update_7 | No fix listed |
Show 139 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | <= 1.5.0 | No fix listed |
| sun jre | = 1.5.0 | No fix listed |
| sun jre | = 1.5.0-update1 | No fix listed |
| sun jre | = 1.5.0-update10 | No fix listed |
| sun jre | = 1.5.0-update11 | No fix listed |
| sun jre | = 1.5.0-update12 | No fix listed |
| sun jre | = 1.5.0-update13 | No fix listed |
| sun jre | = 1.5.0-update14 | No fix listed |
| sun jre | = 1.5.0-update15 | No fix listed |
| sun jre | = 1.5.0-update16 | No fix listed |
| sun jre | = 1.5.0-update17 | No fix listed |
| sun jre | = 1.5.0-update18 | No fix listed |
| sun jre | = 1.5.0-update19 | No fix listed |
| sun jre | = 1.5.0-update2 | No fix listed |
| sun jre | = 1.5.0-update20 | No fix listed |
| sun jre | = 1.5.0-update21 | No fix listed |
| sun jre | = 1.5.0-update22 | No fix listed |
| sun jre | = 1.5.0-update23 | No fix listed |
| sun jre | = 1.5.0-update24 | No fix listed |
| sun jre | = 1.5.0-update25 | No fix listed |
| sun jre | = 1.5.0-update26 | No fix listed |
| sun jre | = 1.5.0-update3 | No fix listed |
| sun jre | = 1.5.0-update4 | No fix listed |
| sun jre | = 1.5.0-update5 | No fix listed |
| sun jre | = 1.5.0-update6 | No fix listed |
| sun jre | = 1.5.0-update7 | No fix listed |
| sun jre | = 1.5.0-update8 | No fix listed |
| sun jre | = 1.5.0-update9 | No fix listed |
| sun jre | <= 1.4.2_29 | No fix listed |
| sun jre | = 1.4.2 | No fix listed |
| sun jre | = 1.4.2_1 | No fix listed |
| sun jre | = 1.4.2_2 | No fix listed |
| sun jre | = 1.4.2_3 | No fix listed |
| sun jre | = 1.4.2_4 | No fix listed |
| sun jre | = 1.4.2_5 | No fix listed |
| sun jre | = 1.4.2_6 | No fix listed |
| sun jre | = 1.4.2_7 | No fix listed |
| sun jre | = 1.4.2_8 | No fix listed |
| sun jre | = 1.4.2_9 | No fix listed |
| sun jre | = 1.4.2_10 | No fix listed |
| sun jre | = 1.4.2_11 | No fix listed |
| sun jre | = 1.4.2_12 | No fix listed |
| sun jre | = 1.4.2_13 | No fix listed |
| sun jre | = 1.4.2_14 | No fix listed |
| sun jre | = 1.4.2_15 | No fix listed |
| sun jre | = 1.4.2_16 | No fix listed |
| sun jre | = 1.4.2_17 | No fix listed |
| sun jre | = 1.4.2_18 | No fix listed |
| sun jre | = 1.4.2_19 | No fix listed |
| sun jre | = 1.4.2_20 | No fix listed |
| sun jre | = 1.4.2_21 | No fix listed |
| sun jre | = 1.4.2_22 | No fix listed |
| sun jre | = 1.4.2_23 | No fix listed |
| sun jre | = 1.4.2_24 | No fix listed |
| sun jre | = 1.4.2_25 | No fix listed |
| sun jre | = 1.4.2_26 | No fix listed |
| sun jre | = 1.4.2_27 | No fix listed |
| sun jre | = 1.4.2_28 | No fix listed |
| sun jdk | <= 1.6.0 | No fix listed |
| sun jdk | = 1.6.0 | No fix listed |
| sun jdk | = 1.6.0-update_10 | No fix listed |
| sun jdk | = 1.6.0-update_11 | No fix listed |
| sun jdk | = 1.6.0-update_12 | No fix listed |
| sun jdk | = 1.6.0-update_13 | No fix listed |
| sun jdk | = 1.6.0-update_14 | No fix listed |
| sun jdk | = 1.6.0-update_15 | No fix listed |
| sun jdk | = 1.6.0-update_16 | No fix listed |
| sun jdk | = 1.6.0-update_17 | No fix listed |
| sun jdk | = 1.6.0-update_18 | No fix listed |
| sun jdk | = 1.6.0-update_19 | No fix listed |
| sun jdk | = 1.6.0-update_20 | No fix listed |
| sun jdk | = 1.6.0-update_21 | No fix listed |
| sun jdk | = 1.6.0-update_22 | No fix listed |
| sun jdk | = 1.6.0-update_3 | No fix listed |
| sun jdk | = 1.6.0-update_4 | No fix listed |
| sun jdk | = 1.6.0-update_5 | No fix listed |
| sun jdk | = 1.6.0-update_6 | No fix listed |
| sun jdk | = 1.6.0-update_7 | No fix listed |
| sun jdk | = 1.6.0-update1 | No fix listed |
| sun jdk | = 1.6.0-update1_b06 | No fix listed |
| sun jdk | = 1.6.0-update2 | No fix listed |
| sun jdk | <= 1.5.0 | No fix listed |
| sun jdk | = 1.5.0 | No fix listed |
| sun jdk | = 1.5.0-update1 | No fix listed |
| sun jdk | = 1.5.0-update10 | No fix listed |
| sun jdk | = 1.5.0-update11 | No fix listed |
| sun jdk | = 1.5.0-update12 | No fix listed |
| sun jdk | = 1.5.0-update13 | No fix listed |
| sun jdk | = 1.5.0-update14 | No fix listed |
| sun jdk | = 1.5.0-update15 | No fix listed |
| sun jdk | = 1.5.0-update16 | No fix listed |
| sun jdk | = 1.5.0-update17 | No fix listed |
| sun jdk | = 1.5.0-update18 | No fix listed |
| sun jdk | = 1.5.0-update19 | No fix listed |
| sun jdk | = 1.5.0-update2 | No fix listed |
| sun jdk | = 1.5.0-update20 | No fix listed |
| sun jdk | = 1.5.0-update21 | No fix listed |
| sun jdk | = 1.5.0-update22 | No fix listed |
| sun jdk | = 1.5.0-update23 | No fix listed |
| sun jdk | = 1.5.0-update24 | No fix listed |
| sun jdk | = 1.5.0-update25 | No fix listed |
| sun jdk | = 1.5.0-update26 | No fix listed |
| sun jdk | = 1.5.0-update3 | No fix listed |
| sun jdk | = 1.5.0-update4 | No fix listed |
| sun jdk | = 1.5.0-update5 | No fix listed |
| sun jdk | = 1.5.0-update6 | No fix listed |
| sun jdk | = 1.5.0-update7 | No fix listed |
| sun jdk | = 1.5.0-update8 | No fix listed |
| sun jdk | = 1.5.0-update9 | No fix listed |
| sun sdk | <= 1.4.2_29 | No fix listed |
| sun sdk | = 1.4.2 | No fix listed |
| sun sdk | = 1.4.2_1 | No fix listed |
| sun sdk | = 1.4.2_02 | No fix listed |
| sun sdk | = 1.4.2_3 | No fix listed |
| sun sdk | = 1.4.2_4 | No fix listed |
| sun sdk | = 1.4.2_5 | No fix listed |
| sun sdk | = 1.4.2_6 | No fix listed |
| sun sdk | = 1.4.2_7 | No fix listed |
| sun sdk | = 1.4.2_8 | No fix listed |
| sun sdk | = 1.4.2_9 | No fix listed |
| sun sdk | = 1.4.2_10 | No fix listed |
| sun sdk | = 1.4.2_11 | No fix listed |
| sun sdk | = 1.4.2_12 | No fix listed |
| sun sdk | = 1.4.2_13 | No fix listed |
| sun sdk | = 1.4.2_14 | No fix listed |
| sun sdk | = 1.4.2_15 | No fix listed |
| sun sdk | = 1.4.2_16 | No fix listed |
| sun sdk | = 1.4.2_17 | No fix listed |
| sun sdk | = 1.4.2_18 | No fix listed |
| sun sdk | = 1.4.2_19 | No fix listed |
| sun sdk | = 1.4.2_20 | No fix listed |
| sun sdk | = 1.4.2_21 | No fix listed |
| sun sdk | = 1.4.2_22 | No fix listed |
| sun sdk | = 1.4.2_23 | No fix listed |
| sun sdk | = 1.4.2_24 | No fix listed |
| sun sdk | = 1.4.2_25 | No fix listed |
| sun sdk | = 1.4.2_26 | No fix listed |
| sun sdk | = 1.4.2_27 | No fix listed |
| sun sdk | = 1.4.2_28 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- github.com patch
- github.com product
- oval:org.mitre.oval:def:12662 signature vdb-entry
- oval:org.mitre.oval:def:12745 signature vdb-entry
- oval:org.mitre.oval:def:14328 signature vdb-entry
- oval:org.mitre.oval:def:14589 signature vdb-entry
- oval:org.mitre.oval:def:19493 signature vdb-entry
- svn.apache.org
- svn.apache.org
- svn.apache.org
- tomcat.apache.org
- tomcat.apache.org
- tomcat.apache.org
- blog.fortify.com
- blogs.oracle.com
- FEDORA-2011-1231 vendor-advisory
- FEDORA-2011-1263 vendor-advisory
- SUSE-SA:2011:024 vendor-advisory
- SUSE-SU-2011:0823 vendor-advisory
- SSRT100387 vendor-advisory
- SSRT100412 vendor-advisory
- HPSBUX02645 vendor-advisory
- HPSBUX02642 vendor-advisory
- HPSBOV02634 vendor-advisory
- HPSBTU02684 vendor-advisory
- HPSBMA02642 vendor-advisory
- HPSBMU02690 vendor-advisory
- SSRT100627 vendor-advisory
- HPSBOV02762 vendor-advisory
- HPSBUX02777 vendor-advisory
- HPSBMU02799 vendor-advisory
- SSRT100867 vendor-advisory
- HPSBUX02860 vendor-advisory
- GLSA-201406-32 vendor-advisory
- support.novell.com
- IZ94423 vendor-advisory
- PM31983 vendor-advisory
- www-01.ibm.com
- DSA-2161 vendor-advisory
- www.exploringbinary.com
- www.hitachi.co.jp
- www.ibm.com
- www.ibm.com
- MDVSA-2011:054 vendor-advisory
- www.oracle.com patch vendor-advisory
- www.oracle.com patch vendor-advisory
- www.oracle.com patch vendor-advisory
- RHSA-2011:0210 vendor-advisory
- RHSA-2011:0211 vendor-advisory
- RHSA-2011:0212 vendor-advisory
- RHSA-2011:0213 vendor-advisory
- RHSA-2011:0214 vendor-advisory
- RHSA-2011:0282 vendor-advisory
- RHSA-2011:0333 vendor-advisory
- RHSA-2011:0334 vendor-advisory
- RHSA-2011:0880 vendor-advisory
- HPSBNS02633 vendor-advisory
- github.com
- 43048 third-party-advisory vendor-advisory
- 43280 third-party-advisory vendor-advisory
- 43295 third-party-advisory vendor-advisory
- 43304 third-party-advisory vendor-advisory
- 43333 third-party-advisory vendor-advisory
- 43378 third-party-advisory vendor-advisory
- 43400 third-party-advisory vendor-advisory
- 43659 third-party-advisory vendor-advisory
- 44954 third-party-advisory
- 45022 third-party-advisory
- 45555 third-party-advisory vendor-advisory
- 49198 third-party-advisory
- 1025062 vdb-entry
- ADV-2011-0365 vdb-entry vendor-advisory
- ADV-2011-0377 vdb-entry vendor-advisory
- ADV-2011-0379 vdb-entry vendor-advisory
- ADV-2011-0422 vdb-entry vendor-advisory
- ADV-2011-0434 vdb-entry vendor-advisory
- ADV-2011-0605 vdb-entry vendor-advisory