CVE-2006-6731 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2006-6731
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-6731

Description: Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allow attackers to develop Java applets that read, write, or execute local files, possibly related to (1) integer overflows in the Java_sun_awt_image_ImagingLib_convolveBI, awt_parseRaster, and awt_parseColorModel functions; (2) a stack overflow in the Java_sun_awt_image_ImagingLib_lookupByteRaster function; and (3) improper handling of certain negative values in the Java_sun_font_SunLayoutEngine_nativeLayout function. NOTE: some of these details are obtained from third party information.

CVE Status: Candidate

References: SUSE http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html http://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-102729-1 ST 1017425 SAID Secunia Advisory: SA23445 Secunia Advisory: SA23650 Secunia Advisory: SA23835 Secunia Advisory: SA24099 Secunia Advisory: SA24189 Secunia Advisory: SA24468 Secunia Advisory: SA25283 Secunia Advisory: SA25404 Secunia Advisory: SA28115 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0062.html http://www.redhat.com/support/errata/RHSA-2007-0073.html http://www.redhat.com/support/errata/RHSA-2007-0072.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10134 MISC http://docs.info.apple.com/article.html?artnum=307177 http://scary.beasts.org/security/CESA-2005-008.txt HP http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200705-20.xml http://security.gentoo.org/glsa/glsa-200702-08.xml http://security.gentoo.org/glsa/glsa-200701-15.xml CERT-VN 149457 939609 CERT http://www.us-cert.gov/cas/techalerts/TA07-022A.html BID 21675 BEA http://dev2dev.bea.com/pub/advisory/243 APPLE http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability