The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA, GitHub and Red Hat.
Summary
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | org.apache.tomcat:tomcat (Maven) | 7.0.0 to before 7.0.7 | 7.0.7 | Patch available | GHSA-gvgc-rxmh-5hvw |
| — | org.apache.tomcat:tomcat (Maven) | 6.0.0 to before 6.0.32 | 6.0.32 | Patch available | GHSA-gvgc-rxmh-5hvw |
| — | org.apache.tomcat:tomcat (Maven) | 5.5.0 to before 5.5.33 | 5.5.33 | Patch available | GHSA-gvgc-rxmh-5hvw |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- org.apache.tomcat:tomcat (Maven) Vendor— Affected 7.0.0 to before 7.0.7 Fixed in 7.0.7 Patch available GHSA-gvgc-rxmh-5hvw
- org.apache.tomcat:tomcat (Maven) Vendor— Affected 6.0.0 to before 6.0.32 Fixed in 6.0.32 Patch available GHSA-gvgc-rxmh-5hvw
- org.apache.tomcat:tomcat (Maven) Vendor— Affected 5.5.0 to before 5.5.33 Fixed in 5.5.33 Patch available GHSA-gvgc-rxmh-5hvw
CPE configurations NVD · 161
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:sun:jre:*:update_23:*:*:*:*:*:* | up to 1.6.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:* | 1.6.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:* | 1.6.0 update_1 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:* | 1.6.0 update_10 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:* | 1.6.0 update_11 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:* | 1.6.0 update_12 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:* | 1.6.0 update_13 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:* | 1.6.0 update_14 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:* | 1.6.0 update_15 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:* | 1.6.0 update_16 | Vulnerable | Sun |
- cpe:2.3:a:sun:jre:*:update_23:*:*:*:*:*:* Versions up to 1.6.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:* Versions 1.6.0 update_1 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:* Versions 1.6.0 update_10 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:* Versions 1.6.0 update_11 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:* Versions 1.6.0 update_12 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:* Versions 1.6.0 update_13 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:* Versions 1.6.0 update_14 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:* Versions 1.6.0 update_15 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:* Versions 1.6.0 update_16 Vulnerable ·Sun
Show 151 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:* | 1.6.0 update_17 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:* | 1.6.0 update_18 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:* | 1.6.0 update_19 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:* | 1.6.0 update_2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:* | 1.6.0 update_20 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:* | 1.6.0 update_21 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_22:*:*:*:*:*:* | 1.6.0 update_22 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:* | 1.6.0 update_3 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:* | 1.6.0 update_4 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:* | 1.6.0 update_5 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:* | 1.6.0 update_6 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:* | 1.6.0 update_7 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:*:update_23:*:*:*:*:*:* | up to 1.6.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:* | 1.6.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:* | 1.6.0 update_10 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:* | 1.6.0 update_11 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:* | 1.6.0 update_12 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:* | 1.6.0 update_13 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:* | 1.6.0 update_14 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:* | 1.6.0 update_15 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:* | 1.6.0 update_16 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:* | 1.6.0 update_17 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:* | 1.6.0 update_18 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:* | 1.6.0 update_19 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:* | 1.6.0 update_20 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:* | 1.6.0 update_21 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_22:*:*:*:*:*:* | 1.6.0 update_22 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:* | 1.6.0 update_3 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:* | 1.6.0 update_4 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:* | 1.6.0 update_5 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:* | 1.6.0 update_6 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:* | 1.6.0 update_7 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:* | 1.6.0 update1 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:* | 1.6.0 update1_b06 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:* | 1.6.0 update2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:*:update27:*:*:*:*:*:* | up to 1.5.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:* | 1.5.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:* | 1.5.0 update1 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:* | 1.5.0 update10 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:* | 1.5.0 update11 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:* | 1.5.0 update12 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:* | 1.5.0 update13 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:* | 1.5.0 update14 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:* | 1.5.0 update15 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:* | 1.5.0 update16 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:* | 1.5.0 update17 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:* | 1.5.0 update18 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:* | 1.5.0 update19 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:* | 1.5.0 update2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:* | 1.5.0 update20 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:* | 1.5.0 update21 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:* | 1.5.0 update22 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:* | 1.5.0 update23 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:* | 1.5.0 update24 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:* | 1.5.0 update25 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:* | 1.5.0 update26 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:* | 1.5.0 update3 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:* | 1.5.0 update4 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:* | 1.5.0 update5 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:* | 1.5.0 update6 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:* | 1.5.0 update7 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:* | 1.5.0 update8 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:* | 1.5.0 update9 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:* | up to 1.4.2_29 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:* | 1.4.2 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:* | 1.4.2_1 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:* | 1.4.2_02 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:* | 1.4.2_3 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:* | 1.4.2_4 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:* | 1.4.2_5 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:* | 1.4.2_6 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:* | 1.4.2_7 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:* | 1.4.2_8 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:* | 1.4.2_9 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:* | 1.4.2_10 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:* | 1.4.2_11 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:* | 1.4.2_12 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:* | 1.4.2_13 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:* | 1.4.2_14 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:* | 1.4.2_15 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:* | 1.4.2_16 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:* | 1.4.2_17 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:* | 1.4.2_18 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:* | 1.4.2_19 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:* | 1.4.2_20 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:* | 1.4.2_21 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:* | 1.4.2_22 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:* | 1.4.2_23 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_24:*:*:*:*:*:*:* | 1.4.2_24 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_25:*:*:*:*:*:*:* | 1.4.2_25 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_26:*:*:*:*:*:*:* | 1.4.2_26 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_27:*:*:*:*:*:*:* | 1.4.2_27 | Vulnerable | Sun |
| cpe:2.3:a:sun:sdk:1.4.2_28:*:*:*:*:*:*:* | 1.4.2_28 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:*:update27:*:*:*:*:*:* | up to 1.5.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:* | 1.5.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:* | 1.5.0 update1 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:* | 1.5.0 update10 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:* | 1.5.0 update11 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:* | 1.5.0 update12 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:* | 1.5.0 update13 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:* | 1.5.0 update14 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:* | 1.5.0 update15 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:* | 1.5.0 update16 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:* | 1.5.0 update17 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:* | 1.5.0 update18 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:* | 1.5.0 update19 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:* | 1.5.0 update2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:* | 1.5.0 update20 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:* | 1.5.0 update21 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:* | 1.5.0 update22 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:* | 1.5.0 update23 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:* | 1.5.0 update24 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:* | 1.5.0 update25 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:* | 1.5.0 update26 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:* | 1.5.0 update3 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:* | 1.5.0 update4 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:* | 1.5.0 update5 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:* | 1.5.0 update6 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:* | 1.5.0 update7 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:* | 1.5.0 update8 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:* | 1.5.0 update9 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:* | up to 1.4.2_29 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:* | 1.4.2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:* | 1.4.2_1 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:* | 1.4.2_2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:* | 1.4.2_3 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:* | 1.4.2_4 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:* | 1.4.2_5 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:* | 1.4.2_6 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:* | 1.4.2_7 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:* | 1.4.2_8 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:* | 1.4.2_9 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:* | 1.4.2_10 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:* | 1.4.2_11 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:* | 1.4.2_12 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:* | 1.4.2_13 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:* | 1.4.2_14 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:* | 1.4.2_15 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:* | 1.4.2_16 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:* | 1.4.2_17 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:* | 1.4.2_18 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:* | 1.4.2_19 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:* | 1.4.2_20 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:* | 1.4.2_21 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:* | 1.4.2_22 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:* | 1.4.2_23 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:* | 1.4.2_24 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_25:*:*:*:*:*:*:* | 1.4.2_25 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_26:*:*:*:*:*:*:* | 1.4.2_26 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_27:*:*:*:*:*:*:* | 1.4.2_27 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_28:*:*:*:*:*:*:* | 1.4.2_28 | Vulnerable | Sun |
- cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:* Versions 1.6.0 update_17 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:* Versions 1.6.0 update_18 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:* Versions 1.6.0 update_19 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:* Versions 1.6.0 update_2 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:* Versions 1.6.0 update_20 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:* Versions 1.6.0 update_21 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_22:*:*:*:*:*:* Versions 1.6.0 update_22 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:* Versions 1.6.0 update_3 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:* Versions 1.6.0 update_4 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:* Versions 1.6.0 update_5 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:* Versions 1.6.0 update_6 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:* Versions 1.6.0 update_7 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:*:update_23:*:*:*:*:*:* Versions up to 1.6.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:* Versions 1.6.0 update_10 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:* Versions 1.6.0 update_11 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:* Versions 1.6.0 update_12 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:* Versions 1.6.0 update_13 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:* Versions 1.6.0 update_14 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:* Versions 1.6.0 update_15 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:* Versions 1.6.0 update_16 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:* Versions 1.6.0 update_17 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:* Versions 1.6.0 update_18 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:* Versions 1.6.0 update_19 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:* Versions 1.6.0 update_20 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:* Versions 1.6.0 update_21 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_22:*:*:*:*:*:* Versions 1.6.0 update_22 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:* Versions 1.6.0 update_3 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:* Versions 1.6.0 update_4 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:* Versions 1.6.0 update_5 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:* Versions 1.6.0 update_6 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:* Versions 1.6.0 update_7 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:* Versions 1.6.0 update1 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:* Versions 1.6.0 update1_b06 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:* Versions 1.6.0 update2 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:*:update27:*:*:*:*:*:* Versions up to 1.5.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:* Versions 1.5.0 update1 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:* Versions 1.5.0 update10 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:* Versions 1.5.0 update11 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:* Versions 1.5.0 update12 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:* Versions 1.5.0 update13 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:* Versions 1.5.0 update14 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:* Versions 1.5.0 update15 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:* Versions 1.5.0 update16 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:* Versions 1.5.0 update17 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:* Versions 1.5.0 update18 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:* Versions 1.5.0 update19 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:* Versions 1.5.0 update2 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:* Versions 1.5.0 update20 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:* Versions 1.5.0 update21 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:* Versions 1.5.0 update22 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:* Versions 1.5.0 update23 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:* Versions 1.5.0 update24 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:* Versions 1.5.0 update25 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:* Versions 1.5.0 update26 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:* Versions 1.5.0 update3 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:* Versions 1.5.0 update4 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:* Versions 1.5.0 update5 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:* Versions 1.5.0 update6 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:* Versions 1.5.0 update7 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:* Versions 1.5.0 update8 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:* Versions 1.5.0 update9 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:* Versions up to 1.4.2_29 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:* Versions 1.4.2_1 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:* Versions 1.4.2_02 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:* Versions 1.4.2_3 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:* Versions 1.4.2_4 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:* Versions 1.4.2_5 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:* Versions 1.4.2_6 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:* Versions 1.4.2_7 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:* Versions 1.4.2_8 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:* Versions 1.4.2_9 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:* Versions 1.4.2_10 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:* Versions 1.4.2_11 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:* Versions 1.4.2_12 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:* Versions 1.4.2_13 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:* Versions 1.4.2_14 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:* Versions 1.4.2_15 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:* Versions 1.4.2_16 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:* Versions 1.4.2_17 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:* Versions 1.4.2_18 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:* Versions 1.4.2_19 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:* Versions 1.4.2_20 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:* Versions 1.4.2_21 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:* Versions 1.4.2_22 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:* Versions 1.4.2_23 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_24:*:*:*:*:*:*:* Versions 1.4.2_24 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_25:*:*:*:*:*:*:* Versions 1.4.2_25 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_26:*:*:*:*:*:*:* Versions 1.4.2_26 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_27:*:*:*:*:*:*:* Versions 1.4.2_27 Vulnerable ·Sun
- cpe:2.3:a:sun:sdk:1.4.2_28:*:*:*:*:*:*:* Versions 1.4.2_28 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:*:update27:*:*:*:*:*:* Versions up to 1.5.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:* Versions 1.5.0 update1 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:* Versions 1.5.0 update10 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:* Versions 1.5.0 update11 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:* Versions 1.5.0 update12 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:* Versions 1.5.0 update13 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:* Versions 1.5.0 update14 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:* Versions 1.5.0 update15 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:* Versions 1.5.0 update16 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:* Versions 1.5.0 update17 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:* Versions 1.5.0 update18 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:* Versions 1.5.0 update19 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:* Versions 1.5.0 update2 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:* Versions 1.5.0 update20 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:* Versions 1.5.0 update21 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:* Versions 1.5.0 update22 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:* Versions 1.5.0 update23 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:* Versions 1.5.0 update24 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:* Versions 1.5.0 update25 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:* Versions 1.5.0 update26 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:* Versions 1.5.0 update3 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:* Versions 1.5.0 update4 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:* Versions 1.5.0 update5 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:* Versions 1.5.0 update6 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:* Versions 1.5.0 update7 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:* Versions 1.5.0 update8 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:* Versions 1.5.0 update9 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:* Versions up to 1.4.2_29 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:* Versions 1.4.2_1 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:* Versions 1.4.2_2 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:* Versions 1.4.2_3 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:* Versions 1.4.2_4 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:* Versions 1.4.2_5 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:* Versions 1.4.2_6 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:* Versions 1.4.2_7 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:* Versions 1.4.2_8 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:* Versions 1.4.2_9 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:* Versions 1.4.2_10 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:* Versions 1.4.2_11 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:* Versions 1.4.2_12 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:* Versions 1.4.2_13 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:* Versions 1.4.2_14 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:* Versions 1.4.2_15 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:* Versions 1.4.2_16 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:* Versions 1.4.2_17 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:* Versions 1.4.2_18 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:* Versions 1.4.2_19 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:* Versions 1.4.2_20 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:* Versions 1.4.2_21 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:* Versions 1.4.2_22 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:* Versions 1.4.2_23 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:* Versions 1.4.2_24 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_25:*:*:*:*:*:*:* Versions 1.4.2_25 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_26:*:*:*:*:*:*:* Versions 1.4.2_26 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_27:*:*:*:*:*:*:* Versions 1.4.2_27 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_28:*:*:*:*:*:*:* Versions 1.4.2_28 Vulnerable ·Sun
Remediation
- Fix · GHSA-gvgc-rxmh-5hvw org.apache.tomcat:tomcat (Maven) Fixed in 7.0.7 Advisory →
- Fix · GHSA-gvgc-rxmh-5hvw org.apache.tomcat:tomcat (Maven) Fixed in 6.0.32 Advisory →
- Fix · GHSA-gvgc-rxmh-5hvw org.apache.tomcat:tomcat (Maven) Fixed in 5.5.33 Advisory →
Red Hat 18 advisories
- RHSA-2011:0880 Released 2011-06-16 · Red Hat rating LowRed Hat Network Satellite server IBM Java Runtime security update
- Red Hat Satellite 5.4 (RHEL v.5) java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5.i386, java-1.6.0-ibm-devel-1:1.6.0.9.1-1jpp.1.el5 +1
- RHSA-2011:0350 Released 2011-03-11 · Red Hat rating Importanttomcat5 and tomcat6 security update
- Red Hat JBoss Web Server 1.0
- RHSA-2011:0349 Released 2011-03-11 · Red Hat rating Importanttomcat5 security update
- Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server tomcat5-5.5.28-12_patch_03.ep5.el5, tomcat5-admin-webapps-5.5.28-12_patch_03.ep5.el5, tomcat5-common-lib-5.5.28-12_patch_03.ep5.el5 +10
- Red Hat JBoss Web Server 1.0 for RHEL 4 AS tomcat5-5.5.28-18_patch_03.ep5.el4, tomcat5-admin-webapps-5.5.28-18_patch_03.ep5.el4, tomcat5-common-lib-5.5.28-18_patch_03.ep5.el4 +10
- Red Hat JBoss Web Server 1.0 for RHEL 4 ES tomcat5-5.5.28-18_patch_03.ep5.el4, tomcat5-admin-webapps-5.5.28-18_patch_03.ep5.el4, tomcat5-common-lib-5.5.28-18_patch_03.ep5.el4 +10
Show 15 more Red Hat advisories
- RHSA-2011:0348 Released 2011-03-11 · Red Hat rating Importanttomcat6 security update
- Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server tomcat6-6.0.24-11.patch_03.ep5.el5, tomcat6-admin-webapps-6.0.24-11.patch_03.ep5.el5, tomcat6-docs-webapp-6.0.24-11.patch_03.ep5.el5 +7
- Red Hat JBoss Web Server 1.0 for RHEL 4 AS tomcat6-6.0.24-11.patch_03.ep5.el4, tomcat6-admin-webapps-6.0.24-11.patch_03.ep5.el4, tomcat6-docs-webapp-6.0.24-11.patch_03.ep5.el4 +7
- Red Hat JBoss Web Server 1.0 for RHEL 4 ES tomcat6-6.0.24-11.patch_03.ep5.el4, tomcat6-admin-webapps-6.0.24-11.patch_03.ep5.el4, tomcat6-docs-webapp-6.0.24-11.patch_03.ep5.el4 +7
- RHSA-2011:0336 Released 2011-03-09 · Red Hat rating Importanttomcat5 security update
- Red Hat Enterprise Linux (v. 5.6.z server) tomcat5-5.5.23-0jpp.17.el5_6, tomcat5-5.5.23-0jpp.17.el5_6.i386, tomcat5-5.5.23-0jpp.17.el5_6.ia64 +41
- RHSA-2011:0335 Released 2011-03-09 · Red Hat rating Importanttomcat6 security and bug fix update
- Red Hat Enterprise Linux Desktop Optional (v. 6) tomcat6-6.0.24-24.el6_0, tomcat6-admin-webapps-6.0.24-24.el6_0, tomcat6-docs-webapp-6.0.24-24.el6_0 +7
- Red Hat Enterprise Linux HPC Node Optional (v. 6) tomcat6-6.0.24-24.el6_0, tomcat6-admin-webapps-6.0.24-24.el6_0, tomcat6-docs-webapp-6.0.24-24.el6_0 +7
- Red Hat Enterprise Linux Server (v. 6) tomcat6-6.0.24-24.el6_0, tomcat6-el-2.1-api-6.0.24-24.el6_0, tomcat6-jsp-2.1-api-6.0.24-24.el6_0 +2
- Red Hat Enterprise Linux Server Optional (v. 6) tomcat6-6.0.24-24.el6_0, tomcat6-admin-webapps-6.0.24-24.el6_0, tomcat6-docs-webapp-6.0.24-24.el6_0 +3
- Red Hat Enterprise Linux Workstation (v. 6) tomcat6-6.0.24-24.el6_0, tomcat6-el-2.1-api-6.0.24-24.el6_0, tomcat6-jsp-2.1-api-6.0.24-24.el6_0 +2
- Red Hat Enterprise Linux Workstation Optional (v. 6) tomcat6-6.0.24-24.el6_0, tomcat6-admin-webapps-6.0.24-24.el6_0, tomcat6-docs-webapp-6.0.24-24.el6_0 +3
- RHSA-2011:0334 Released 2011-03-09 · Red Hat rating ImportantJBoss Enterprise Portal Platform 4.3.CP06 and 5.1.0 security update
- Red Hat JBoss Portal 4.3
- Red Hat JBoss Portal 5
- RHSA-2011:0333 Released 2011-03-09 · Red Hat rating ImportantJBoss Enterprise SOA Platform 4.3.CP04 and 5.0.2 security update
- Red Hat JBoss SOA Platform 4.3
- Red Hat JBoss SOA Platform 5.0
- RHSA-2011:0299 Released 2011-02-23 · Red Hat rating Moderatejava-1.4.2-ibm-sap security update
- RHEL 4 AS for SAP java-1.4.2-ibm-sap-1.4.2.13.8.sap-1jpp.2.el4_8, java-1.4.2-ibm-sap-demo-1.4.2.13.8.sap-1jpp.2.el4_8, java-1.4.2-ibm-sap-devel-1.4.2.13.8.sap-1jpp.2.el4_8 +2
- RHEL 5 Server for SAP java-1.4.2-ibm-sap-1.4.2.13.8.sap-1jpp.2.el5, java-1.4.2-ibm-sap-demo-1.4.2.13.8.sap-1jpp.2.el5, java-1.4.2-ibm-sap-devel-1.4.2.13.8.sap-1jpp.2.el5 +2
- RHSA-2011:0290 Released 2011-02-22 · Red Hat rating Moderatejava-1.6.0-ibm security update
- Red Hat Desktop version 4 Extras java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el4, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.9.0-1jpp.4.el4 +11
- Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el4, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el4.i386, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el4.ppc +18
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el5, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el5.i386, java-1.6.0-ibm-accessibility-1:1.6.0.9.0-1jpp.4.el5 +13
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.9.0-1jpp.5.el6, java-1.6.0-ibm-demo-1:1.6.0.9.0-1jpp.5.el6, java-1.6.0-ibm-devel-1:1.6.0.9.0-1jpp.5.el6 +4
- Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el4, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.9.0-1jpp.4.el4 +11
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.9.0-1jpp.5.el6, java-1.6.0-ibm-demo-1:1.6.0.9.0-1jpp.5.el6, java-1.6.0-ibm-devel-1:1.6.0.9.0-1jpp.5.el6 +2
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el5, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el5.i386, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el5.ppc +21
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.9.0-1jpp.5.el6, java-1.6.0-ibm-demo-1:1.6.0.9.0-1jpp.5.el6, java-1.6.0-ibm-devel-1:1.6.0.9.0-1jpp.5.el6 +5
- Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el4, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.9.0-1jpp.4.el4 +11
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.9.0-1jpp.5.el6, java-1.6.0-ibm-demo-1:1.6.0.9.0-1jpp.5.el6, java-1.6.0-ibm-devel-1:1.6.0.9.0-1jpp.5.el6 +4
- RHSA-2011:0292 Released 2011-02-22 · Red Hat rating Moderatejava-1.4.2-ibm security update
- Red Hat Desktop version 4 Extras java-1.4.2-ibm-1.4.2.13.8-1jpp.4.el4, java-1.4.2-ibm-1.4.2.13.8-1jpp.4.el4.i386, java-1.4.2-ibm-demo-1.4.2.13.8-1jpp.4.el4 +9
- Red Hat Enterprise Linux AS version 4 Extras java-1.4.2-ibm-1.4.2.13.8-1jpp.4.el4, java-1.4.2-ibm-1.4.2.13.8-1jpp.4.el4.i386, java-1.4.2-ibm-1.4.2.13.8-1jpp.4.el4.ia64 +20
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el5, java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el5.i386, java-1.4.2-ibm-demo-1.4.2.13.8-1jpp.3.el5 +9
- Red Hat Enterprise Linux ES version 4 Extras java-1.4.2-ibm-1.4.2.13.8-1jpp.4.el4, java-1.4.2-ibm-1.4.2.13.8-1jpp.4.el4.i386, java-1.4.2-ibm-1.4.2.13.8-1jpp.4.el4.ia64 +13
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el5, java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el5.i386, java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el5.ia64 +20
- Red Hat Enterprise Linux WS version 4 Extras java-1.4.2-ibm-1.4.2.13.8-1jpp.4.el4, java-1.4.2-ibm-1.4.2.13.8-1jpp.4.el4.i386, java-1.4.2-ibm-1.4.2.13.8-1jpp.4.el4.ia64 +13
- RHSA-2011:0291 Released 2011-02-22 · Red Hat rating Moderatejava-1.5.0-ibm security update
- Red Hat Desktop version 4 Extras java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el4, java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el4.i386, java-1.5.0-ibm-demo-1:1.5.0.12.3-1jpp.2.el4 +9
- Red Hat Enterprise Linux AS version 4 Extras java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el4, java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el4.i386, java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el4.ppc +17
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el5, java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el5.i386, java-1.5.0-ibm-accessibility-1:1.5.0.12.3-1jpp.2.el5 +11
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.12.3-1jpp.3.el6, java-1.5.0-ibm-demo-1:1.5.0.12.3-1jpp.3.el6, java-1.5.0-ibm-devel-1:1.5.0.12.3-1jpp.3.el6 +4
- Red Hat Enterprise Linux ES version 4 Extras java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el4, java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el4.i386, java-1.5.0-ibm-demo-1:1.5.0.12.3-1jpp.2.el4 +9
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.12.3-1jpp.3.el6, java-1.5.0-ibm-demo-1:1.5.0.12.3-1jpp.3.el6, java-1.5.0-ibm-devel-1:1.5.0.12.3-1jpp.3.el6 +2
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el5, java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el5.i386, java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el5.ppc +20
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.12.3-1jpp.3.el6, java-1.5.0-ibm-demo-1:1.5.0.12.3-1jpp.3.el6, java-1.5.0-ibm-devel-1:1.5.0.12.3-1jpp.3.el6 +7
- Red Hat Enterprise Linux WS version 4 Extras java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el4, java-1.5.0-ibm-1:1.5.0.12.3-1jpp.2.el4.i386, java-1.5.0-ibm-demo-1:1.5.0.12.3-1jpp.2.el4 +9
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.12.3-1jpp.3.el6, java-1.5.0-ibm-demo-1:1.5.0.12.3-1jpp.3.el6, java-1.5.0-ibm-devel-1:1.5.0.12.3-1jpp.3.el6 +4
- RHSA-2011:0282 Released 2011-02-17 · Red Hat rating Criticaljava-1.6.0-sun security update
- Red Hat Desktop version 4 Extras java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el4 +9
- Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el4 +9
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el5 +9
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.24-1jpp.1.el6 +3
- Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el4 +9
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.24-1jpp.1.el6 +1
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.24-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el5 +9
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.24-1jpp.1.el6 +3
- Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.24-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el4 +9
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.24-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.24-1jpp.1.el6 +3
- RHSA-2011:0214 Released 2011-02-11 · Red Hat rating Moderatejava-1.6.0-openjdk security update
- Red Hat Enterprise Linux (v. 5.6.z server) java-1.6.0-openjdk-1:1.6.0.0-1.18.b17.el5, java-1.6.0-openjdk-1:1.6.0.0-1.18.b17.el5.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-1.18.b17.el5 +7
- Red Hat Enterprise Linux Desktop (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.36.b17.el6_0
- Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.36.b17.el6_0, java-1.6.0-openjdk-demo-1:1.6.0.0-1.36.b17.el6_0, java-1.6.0-openjdk-devel-1:1.6.0.0-1.36.b17.el6_0 +2
- Red Hat Enterprise Linux HPC Node (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.36.b17.el6_0
- Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.36.b17.el6_0, java-1.6.0-openjdk-demo-1:1.6.0.0-1.36.b17.el6_0, java-1.6.0-openjdk-devel-1:1.6.0.0-1.36.b17.el6_0 +2
- Red Hat Enterprise Linux Server (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.36.b17.el6_0, java-1.6.0-openjdk-devel-1:1.6.0.0-1.36.b17.el6_0, java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.36.b17.el6_0
- Red Hat Enterprise Linux Server Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.36.b17.el6_0, java-1.6.0-openjdk-demo-1:1.6.0.0-1.36.b17.el6_0, java-1.6.0-openjdk-src-1:1.6.0.0-1.36.b17.el6_0
- Red Hat Enterprise Linux Workstation (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.36.b17.el6_0, java-1.6.0-openjdk-devel-1:1.6.0.0-1.36.b17.el6_0, java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.36.b17.el6_0
- Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.36.b17.el6_0, java-1.6.0-openjdk-demo-1:1.6.0.0-1.36.b17.el6_0, java-1.6.0-openjdk-src-1:1.6.0.0-1.36.b17.el6_0
- RHSA-2011:0213 Released 2011-02-10 · Red Hat rating Importantjbossweb security update
- Red Hat JBoss Web Platform 5.1
- RHSA-2011:0212 Released 2011-02-10 · Red Hat rating Importantjbossweb security update
- Red Hat JBoss Enterprise Application Platform 4.2
- Red Hat JBoss Enterprise Application Platform 4.3
- Red Hat JBoss Enterprise Application Platform 5.1
- RHSA-2011:0211 Released 2011-02-10 · Red Hat rating Importantjbossweb security update
- Red Hat JBoss Web Platform 5 for RHEL 5 Server jbossweb-2.1.10-5.patch01.1.1.ep5.el5, jbossweb-jsp-2.1-api-2.1.10-5.patch01.1.1.ep5.el5, jbossweb-lib-2.1.10-5.patch01.1.1.ep5.el5 +1
- RHSA-2011:0210 Released 2011-02-10 · Red Hat rating Importantjbossweb security update
- Red Hat JBoss Enterprise Application Platform 4.2.0 for RHEL 4 AS jbossweb-2.0.0-8.CP15.patch01.0jpp.ep1.1.el4
- Red Hat JBoss Enterprise Application Platform 4.2.0 for RHEL 4 ES jbossweb-2.0.0-8.CP15.patch01.0jpp.ep1.1.el4
- Red Hat JBoss Enterprise Application Platform 4.2.0 for RHEL 5 Server jbossweb-2.0.0-8.CP15.patch01.0jpp.ep1.1.el5
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 AS jbossweb-2.0.0-8.CP15.patch01.0jpp.ep1.1.el4
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ES jbossweb-2.0.0-8.CP15.patch01.0jpp.ep1.1.el4
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 5 Server jbossweb-2.0.0-8.CP15.patch01.0jpp.ep1.1.el5
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS jbossweb-2.1.10-5.patch01.1.ep5.el4, jbossweb-jsp-2.1-api-2.1.10-5.patch01.1.ep5.el4, jbossweb-lib-2.1.10-5.patch01.1.ep5.el4 +1
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES jbossweb-2.1.10-5.patch01.1.ep5.el4, jbossweb-jsp-2.1-api-2.1.10-5.patch01.1.ep5.el4, jbossweb-lib-2.1.10-5.patch01.1.ep5.el4 +1
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server jbossweb-2.1.10-5.patch01.1.1.ep5.el5, jbossweb-jsp-2.1-api-2.1.10-5.patch01.1.1.ep5.el5, jbossweb-lib-2.1.10-5.patch01.1.1.ep5.el5 +1
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| RHEL 4 AS for SAP | Fixed | RHSA-2011:0299 |
| RHEL 5 Server for SAP | Fixed | RHSA-2011:0299 |
| Red Hat Desktop version 4 Extras | Fixed | RHSA-2011:0282, RHSA-2011:0290, RHSA-2011:0291, RHSA-2011:0292 |
| Red Hat Enterprise Linux (v. 5.6.z server) | Fixed | RHSA-2011:0214, RHSA-2011:0336 |
| Red Hat Enterprise Linux AS version 4 Extras | Fixed | RHSA-2011:0282, RHSA-2011:0290, RHSA-2011:0291, RHSA-2011:0292 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2011:0214 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2011:0214, RHSA-2011:0335 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 5) | Fixed | RHSA-2011:0282, RHSA-2011:0290, RHSA-2011:0291, RHSA-2011:0292 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 6) | Fixed | RHSA-2011:0282, RHSA-2011:0290, RHSA-2011:0291 |
| Red Hat Enterprise Linux ES version 4 Extras | Fixed | RHSA-2011:0282, RHSA-2011:0290, RHSA-2011:0291, RHSA-2011:0292 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2011:0214 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2011:0214, RHSA-2011:0335 |
| Red Hat Enterprise Linux HPC Node Supplementary (v. 6) | Fixed | RHSA-2011:0282, RHSA-2011:0290, RHSA-2011:0291 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2011:0214, RHSA-2011:0335 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2011:0214, RHSA-2011:0335 |
| Red Hat Enterprise Linux Server Supplementary (v. 5) | Fixed | RHSA-2011:0282, RHSA-2011:0290, RHSA-2011:0291, RHSA-2011:0292 |
| Red Hat Enterprise Linux Server Supplementary (v. 6) | Fixed | RHSA-2011:0282, RHSA-2011:0290, RHSA-2011:0291 |
| Red Hat Enterprise Linux WS version 4 Extras | Fixed | RHSA-2011:0282, RHSA-2011:0290, RHSA-2011:0291, RHSA-2011:0292 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2011:0214, RHSA-2011:0335 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2011:0214, RHSA-2011:0335 |
| Red Hat Enterprise Linux Workstation Supplementary (v. 6) | Fixed | RHSA-2011:0282, RHSA-2011:0290, RHSA-2011:0291 |
| Red Hat JBoss Enterprise Application Platform 4.2 | Fixed | RHSA-2011:0212 |
| Red Hat JBoss Enterprise Application Platform 4.2.0 for RHEL 4 AS | Fixed | RHSA-2011:0210 |
| Red Hat JBoss Enterprise Application Platform 4.2.0 for RHEL 4 ES | Fixed | RHSA-2011:0210 |
| Red Hat JBoss Enterprise Application Platform 4.2.0 for RHEL 5 Server | Fixed | RHSA-2011:0210 |
| Red Hat JBoss Enterprise Application Platform 4.3 | Fixed | RHSA-2011:0212 |
| Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 AS | Fixed | RHSA-2011:0210 |
| Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ES | Fixed | RHSA-2011:0210 |
| Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 5 Server | Fixed | RHSA-2011:0210 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS | Fixed | RHSA-2011:0210 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES | Fixed | RHSA-2011:0210 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server | Fixed | RHSA-2011:0210 |
| Red Hat JBoss Enterprise Application Platform 5.1 | Fixed | RHSA-2011:0212 |
| Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server | Fixed | RHSA-2011:0348, RHSA-2011:0349 |
| Red Hat JBoss Portal 4.3 | Fixed | RHSA-2011:0334 |
| Red Hat JBoss Portal 5 | Fixed | RHSA-2011:0334 |
| Red Hat JBoss SOA Platform 4.3 | Fixed | RHSA-2011:0333 |
| Red Hat JBoss SOA Platform 5.0 | Fixed | RHSA-2011:0333 |
| Red Hat JBoss Web Platform 5 for RHEL 5 Server | Fixed | RHSA-2011:0211 |
| Red Hat JBoss Web Platform 5.1 | Fixed | RHSA-2011:0213 |
| Red Hat JBoss Web Server 1.0 | Fixed | RHSA-2011:0350 |
| Red Hat JBoss Web Server 1.0 for RHEL 4 AS | Fixed | RHSA-2011:0348, RHSA-2011:0349 |
| Red Hat JBoss Web Server 1.0 for RHEL 4 ES | Fixed | RHSA-2011:0348, RHSA-2011:0349 |
| Red Hat Satellite 5.4 (RHEL v.5) | Fixed | RHSA-2011:0880 |
Not affected: 2 products
- Red Hat JBoss Web Platform 5 for RHEL 4 AS
- Red Hat JBoss Web Platform 5 for RHEL 4 ES
Timeline
- 2026-10-02 Threatist record created from CVE-2010-4476
- 2026-10-03 Alias added: GHSA-gvgc-rxmh-5hvw
References
Patch 3
Advisory 40
- RHSA-2011:0210
- GLSA-201406-32
- HPSBMU02799
- FEDORA-2011-1231
- FEDORA-2011-1263
- SUSE-SU-2011:0823
- HPSBNS02633
- SSRT100387
- HPSBUX02860
- RHSA-2011:0214
- PM31983
- IZ94423
- SSRT100412
- HPSBMA02642
- RHSA-2011:0333
- ADV-2011-0422
- HPSBMU02690
- ADV-2011-0434
- HPSBOV02762
- RHSA-2011:0213
- SSRT100627
- ADV-2011-0377
- HPSBOV02634
- ADV-2011-0365
- RHSA-2011:0880
- RHSA-2011:0334
- RHSA-2011:0282
- DSA-2161
- ADV-2011-0379
- RHSA-2011:0211
- SSRT100867
- SUSE-SA:2011:024
- HPSBUX02777
- HPSBUX02645
- RHSA-2011:0212
- HPSBUX02642
- ADV-2011-0605
- HPSBTU02684
- MDVSA-2011:054
- https://nvd.nist.gov/vuln/detail/CVE-2010-4476
Other 24
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.html
- oval:org.mitre.oval:def:14328
- oval:org.mitre.oval:def:12662
- oval:org.mitre.oval:def:14589
- http://www.exploringbinary.com/java-hangs-when-converting-2-2250738585072012e-308/
- http://blogs.oracle.com/security/2011/02/security_alert_for_cve-2010-44.html
- oval:org.mitre.oval:def:12745
- http://www-01.ibm.com/support/docview.wss?uid=swg21468358
- http://www.ibm.com/support/docview.wss?uid=swg24029498
- oval:org.mitre.oval:def:19493
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html
- http://blog.fortify.com/blog/2011/02/08/Double-Trouble
- http://www.ibm.com/support/docview.wss?uid=swg24029497
- https://github.com/apache/tomcat/commit/407841c426dc52a4c6b8ccd297df6c484a540056
- https://github.com/apache/tomcat/commit/69ef147c4498397e8f644a0699cf588b45a05120
- https://github.com/apache/tomcat/commit/b0c1eeaa0d303bcb42651b222037e079d0634c01
- https://github.com/apache/tomcat
- https://svn.apache.org/viewvc?view=revision&revision=1066244
- https://svn.apache.org/viewvc?view=revision&revision=1066315
- https://svn.apache.org/viewvc?view=revision&revision=1066318
- https://tomcat.apache.org/security-5.html
- https://tomcat.apache.org/security-6.html
- https://tomcat.apache.org/security-7.html
- http://www.exploringbinary.com/java-hangs-when-converting-2-2250738585072012e-308
More Sun Jdk vulnerabilities
- TI-2013-01300 The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update… CVSS 2.0HIGH 10.0
- TI-2008-05098 The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and… CVSS 2.0HIGH 10.0
- TI-2010-04185 Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE)… CVSS 2.0HIGH 10.0
- TI-2010-03392 Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for… CVSS 2.0HIGH 10.0
- TI-2010-03381 Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java… CVSS 2.0HIGH 10.0
- TI-2012-01342 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java… CVSS 2.0HIGH 10.0
Sources
- CVE-2010-4476 · CVE Program
- CVE-2010-4476 · NVD
- FIRST EPSS
- GHSA-gvgc-rxmh-5hvw · GitHub Advisory Database · CC BY 4.0
- CVE-2010-4476 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences