Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2006-2426
HistoryMay 17, 2006 - 10:06 a.m.

CVE-2006-2426

2006-05-1710:06:00
mitre
web.nvd.nist.gov
52
cve-2006-2426
sun java
jre
jdk
sdk
denial of service
disk consumption
font.createfont
nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.422

Percentile

97.4%

JSON

Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory.

Affected configurations

Nvd
Node
sunjdkMatch1.5.0update6
OR
sunjreMatch1.5.0update6
OR
sunsdkMatch1.5.0_6
VendorProductVersionCPE
sunjdk1.5.0cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*
sunjre1.5.0cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*
sunsdk1.5.0_6cpe:2.3:a:sun:sdk:1.5.0_6:*:*:*:*:*:*:*

References

Related

exploitdb 1
veracode 1
prion 1
nessus 13
ubuntucve 1
cvelist 1
nvd 1
openvas 23
securityvulns 2
ubuntu 1
redhat 4
osv 1
debian 1
centos 1
oraclelinux 1
exploitdb
exploitdb
Sun Java Applet - Font.createFont Remote Denial of Service
2006-05-15 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:30:31
prion
prion
Directory traversal
2006-05-17 10:06:00
nessus
nessus
openSUSE 10 Security Update : java-1_5_0-sun (java-1_5_0-sun-1438)
2007-10-17 00:00:00
Ubuntu 8.10 : openjdk-6 vulnerabilities (USN-748-1)
2009-04-23 00:00:00
Debian DSA-1769-1 : openjdk-6 - several vulnerabilities
2009-04-13 00:00:00
ubuntucve
ubuntucve
CVE-2006-2426
2006-05-17 00:00:00
cvelist
cvelist
CVE-2006-2426
2006-05-17 10:00:00
nvd
nvd
CVE-2006-2426
2006-05-17 10:06:00
openvas
openvas
Ubuntu USN-748-1 (openjdk-6)
2009-04-06 00:00:00
Ubuntu: Security Advisory (USN-748-1)
2009-04-06 00:00:00
RedHat Security Advisory RHSA-2009:0394
2009-03-31 00:00:00
securityvulns
securityvulns
OpenJDK multiple security vulnerabilities
2009-03-28 00:00:00
[USN-748-1] OpenJDK vulnerabilities
2009-03-28 00:00:00
ubuntu
ubuntu
OpenJDK vulnerabilities
2009-03-26 00:00:00
redhat
redhat
(RHSA-2009:0394) Critical: java-1.5.0-sun security update
2009-03-26 00:00:00
(RHSA-2009:0377) Important: java-1.6.0-openjdk security update
2009-04-07 00:00:00
(RHSA-2009:0392) Critical: java-1.6.0-sun security update
2009-03-26 00:00:00
osv
osv
openjdk-6 - arbitrary code execution
2009-04-11 00:00:00
debian
debian
[SECURITY] [DSA 1769-1] New openjdk-6 packages fix arbitrary code execution
2009-04-11 14:38:24
centos
centos
java security update
2009-04-08 11:56:07
oraclelinux
oraclelinux
java-1.6.0-openjdk security update
2009-04-07 00:00:00

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.422

Percentile

97.4%

JSON
Related for CVE-2006-2426
exploitdb1veracode1prion1nessus13ubuntucve1cvelist1nvd1openvas23securityvulns2ubuntu1redhat4osv1debian1centos1oraclelinux1