Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jdk:*:update27:*:*:*:*:*:*

part: a version: * update: update27

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJdk (86ca1592-c9ed-54c6-9315-e1ffda84ce5b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-4476 vulnerable 2026-06-08 04:56:28.355433 Details available
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Published: 2011-02-17T18:31:00.000Z
Updated: 2024-08-07T03:43:14.943Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4475 vulnerable 2026-06-08 04:56:28.347085 Details available
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Deployment, a different vulnerability than CVE-2010-4447.
Published: 2011-02-17T18:31:00.000Z
Updated: 2024-08-07T03:43:14.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4473 vulnerable 2026-06-08 04:56:28.334452 Details available
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound and unspecified APIs, a different vulnerability than CVE-2010-4454 and CVE-2010-4462.
Published: 2011-02-17T18:31:00.000Z
Updated: 2024-08-07T03:43:14.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4471 vulnerable 2026-06-08 04:56:28.327742 Details available
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to 2D. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is related to the exposure of system properties via vectors related to Font.createFont and exception text.
Published: 2011-02-17T18:31:00.000Z
Updated: 2024-08-07T03:43:15.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4469 vulnerable 2026-06-08 04:56:28.320940 Details available
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is heap corruption related to the Verifier and "backward jsrs."
Published: 2011-02-17T18:31:00.000Z
Updated: 2024-08-07T03:43:14.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4468 vulnerable 2026-06-08 04:56:28.316102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4466 vulnerable 2026-06-08 04:56:28.309484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4465 vulnerable 2026-06-08 04:56:28.304428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4462 vulnerable 2026-06-08 04:56:28.276002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4454 vulnerable 2026-06-08 04:56:28.240305 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4450 vulnerable 2026-06-08 04:56:28.181977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4448 vulnerable 2026-06-08 04:56:28.152156 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4447 vulnerable 2026-06-08 04:56:28.052280 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.