CVE-2006-6731

Description

Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allow attackers to develop Java applets that read, write, or execute local files, possibly related to (1) integer overflows in the Java_sun_awt_image_ImagingLib_convolveBI, awt_parseRaster, and awt_parseColorModel functions; (2) a stack overflow in the Java_sun_awt_image_ImagingLib_lookupByteRaster function; and (3) improper handling of certain negative values in the Java_sun_font_SunLayoutEngine_nativeLayout function. NOTE: some of these details are obtained from third party information.

9.3

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 5.85% Top 10%

Vendor Advisory hp.com Vendor Advisory sun.com Vendor Advisory redhat.com Vendor Advisory apple.com Vendor Advisory suse.com Vendor Advisory novell.com Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory gentoo.org Vendor Advisory gentoo.org Vendor Advisory gentoo.org Vendor Advisory bea.com

Affected: n/a n/a

References

Link	Tags
http://www.securityfocus.com/bid/21675	patch third party advisory vdb entry
http://docs.info.apple.com/article.html?artnum=307177	third party advisory
http://www.vupen.com/english/advisories/2006/5073	vdb entry permissions required
http://secunia.com/advisories/24468	third party advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579	third party advisory vendor advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102729-1	vendor advisory broken link
http://www.redhat.com/support/errata/RHSA-2007-0062.html	third party advisory vendor advisory
http://www.vupen.com/english/advisories/2007/1814	vdb entry permissions required
http://scary.beasts.org/security/CESA-2005-008.txt	third party advisory
http://secunia.com/advisories/25283	third party advisory
http://secunia.com/advisories/24099	third party advisory
http://secunia.com/advisories/25404	third party advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10134	signature third party advisory vdb entry
http://secunia.com/advisories/24189	third party advisory
http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html	vendor advisory mailing list third party advisory
http://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html	vendor advisory mailing list third party advisory
http://www.kb.cert.org/vuls/id/939609	third party advisory us government resource
http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html	third party advisory vendor advisory
http://www.redhat.com/support/errata/RHSA-2007-0072.html	third party advisory vendor advisory
http://secunia.com/advisories/23445	third party advisory
http://www.vupen.com/english/advisories/2007/4224	vdb entry permissions required
http://secunia.com/advisories/23650	third party advisory
http://secunia.com/advisories/23835	third party advisory
http://securitytracker.com/id?1017425	third party advisory vdb entry
http://www.redhat.com/support/errata/RHSA-2007-0073.html	vendor advisory third party advisory vdb entry
http://www.kb.cert.org/vuls/id/149457	third party advisory us government resource
http://www.gentoo.org/security/en/glsa/glsa-200705-20.xml	third party advisory vendor advisory
http://secunia.com/advisories/28115	third party advisory
http://www.vupen.com/english/advisories/2007/0936	vdb entry permissions required
http://security.gentoo.org/glsa/glsa-200702-08.xml	third party advisory vendor advisory
http://www.us-cert.gov/cas/techalerts/TA07-022A.html	third party advisory us government resource
http://security.gentoo.org/glsa/glsa-200701-15.xml	third party advisory vendor advisory
http://dev2dev.bea.com/pub/advisory/243	third party advisory vendor advisory

Frequently Asked Questions

What is the severity of CVE-2006-6731?: CVE-2006-6731 has been scored as a critical severity vulnerability.
How to fix CVE-2006-6731?: To fix CVE-2006-6731, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2006-6731 being actively exploited in the wild?: It is possible that CVE-2006-6731 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~6% probability that this vulnerability will be exploited by malicious actors in the next 30 days.