CVE-2006-6731
- State
- Published
- Severity
- Not scored
- Published
- Dec 26, 2006
- Updated
- Aug 7, 2024
- Reserved
- Dec 26, 2006
Description
Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allow attackers to develop Java applets that read, write, or execute local files, possibly related to (1) integer overflows in the Java_sun_awt_image_ImagingLib_convolveBI, awt_parseRaster, and awt_parseColorModel functions; (2) a stack overflow in the Java_sun_awt_image_ImagingLib_lookupByteRaster function; and (3) improper handling of certain negative values in the Java_sun_font_SunLayoutEngine_nativeLayout function. NOTE: some of these details are obtained from third party information.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 21675vdb-entry
- http://docs.info.apple.com/article.html?artnum=307177
- ADV-2006-5073vdb-entry
- 24468third-party-advisory
- HPSBUX02196vendor-advisory
- 102729vendor-advisory
- RHSA-2007:0062vendor-advisory
- ADV-2007-1814vdb-entry
- http://scary.beasts.org/security/CESA-2005-008.txt
- 25283third-party-advisory
- 24099third-party-advisory
- 25404third-party-advisory
- oval:org.mitre.oval:def:10134vdb-entrysignature
- 24189third-party-advisory
- APPLE-SA-2007-12-14vendor-advisory
- SUSE-SA:2007:003vendor-advisory
- VU#939609third-party-advisory
- SUSE-SA:2007:010vendor-advisory
- RHSA-2007:0072vendor-advisory
- 23445third-party-advisory
- ADV-2007-4224vdb-entry
- 23650third-party-advisory
- 23835third-party-advisory
- 1017425vdb-entry
- RHSA-2007:0073vendor-advisory
- VU#149457third-party-advisory
- GLSA-200705-20vendor-advisory
- 28115third-party-advisory
- ADV-2007-0936vdb-entry
- GLSA-200702-08vendor-advisory
- TA07-022Athird-party-advisory
- GLSA-200701-15vendor-advisory
- BEA07-174.00vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.