Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jre:*:update_23:*:*:*:*:*:*

part: a version: * update: update_23

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJre (ef72ddc3-ba6c-5980-b49c-cfbb9c0f085e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-4476 vulnerable 2026-06-08 04:56:28.354558 Details available
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Published: 2011-02-17T18:31:00.000Z
Updated: 2024-08-07T03:43:14.943Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4475 vulnerable 2026-06-08 04:56:28.345794 Details available
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Deployment, a different vulnerability than CVE-2010-4447.
Published: 2011-02-17T18:31:00.000Z
Updated: 2024-08-07T03:43:14.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4474 vulnerable 2026-06-08 04:56:28.343243 Details available
Unspecified vulnerability in the Java DB component in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows local users to affect confidentiality via unknown vectors related to Security, a similar vulnerability to CVE-2009-4269.
Published: 2011-02-17T18:31:00.000Z
Updated: 2024-08-07T03:43:14.957Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4473 vulnerable 2026-06-08 04:56:28.333415 Details available
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound and unspecified APIs, a different vulnerability than CVE-2010-4454 and CVE-2010-4462.
Published: 2011-02-17T18:31:00.000Z
Updated: 2024-08-07T03:43:14.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4472 vulnerable 2026-06-08 04:56:28.330381 Details available
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect availability, related to XML Digital Signature and unspecified APIs. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue involves the replacement of the "XML DSig Transform or C14N algorithm implementations."
Published: 2011-02-17T18:31:00.000Z
Updated: 2024-08-07T03:43:14.961Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4471 vulnerable 2026-06-08 04:56:28.326717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4470 vulnerable 2026-06-08 04:56:28.324753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4469 vulnerable 2026-06-08 04:56:28.319651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4468 vulnerable 2026-06-08 04:56:28.315187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4466 vulnerable 2026-06-08 04:56:28.308498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4465 vulnerable 2026-06-08 04:56:28.303339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4462 vulnerable 2026-06-08 04:56:28.274665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4454 vulnerable 2026-06-08 04:56:28.239231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4452 vulnerable 2026-06-08 04:56:28.186607 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4451 vulnerable 2026-06-08 04:56:28.185084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4450 vulnerable 2026-06-08 04:56:28.181096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4448 vulnerable 2026-06-08 04:56:28.151059 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4447 vulnerable 2026-06-08 04:56:28.040885 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4422 vulnerable 2026-06-08 04:56:27.947849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.