Status Tracking Note JVNTR-2011-02

Java Double.parseDouble denial of service (Aka. "2.2250738585072011e-308" issue ) (CVE-2010-4476)

Sun Java is vulnerable to a denial of service, caused by an error in the Double.parseDouble when converting a string into binary floating-point number such as "2.2250738585072012e-308".

Event Information

Date (UTC)	Description
2011-02-15	Oracle Oracle Java SE and Java for Business Critical Patch Update Advisory - February 2011
2011-02-10	Apache Improve HTTP specification compliance in support of Accept-Language header. Tomcat 5.5.33 Released
2011-02-08	Oracle Oracle Security Alert for CVE-2010-4476
2011-02-05	Apache Improve HTTP specification compliance in support of Accept-Language header. Tomcat 7.0.8 Released
2011-02-04	Apache Improve HTTP specification compliance in support of Accept-Language header. Tomcat 6.0.32 Released
2011-01-31 18:28	Java Hangs When Converting 2.2250738585072012e-308 Vulnerability related information disclosed.

CVE-2010-4476


Date first published (UTC):	2011-03-13T11:43+00:00
Date last updated (UTC):	2011-03-13T11:43+00:00