NVD

Id
65275  
Name
CVE-2006-6731  
Description
Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allow attackers to develop Java applets that read, write, or execute local files, possibly related to (1) integer overflows in the Java_sun_awt_image_ImagingLib_convolveBI, awt_parseRaster, and awt_parseColorModel functions; (2) a stack overflow in the Java_sun_awt_image_ImagingLib_lookupByteRaster function; and (3) improper handling of certain negative values in the Java_sun_font_SunLayoutEngine_nativeLayout function. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-12-26  
Modified Date
2011-03-07  
Seq
2006-6731  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
340608 65275 CVE-2006-6731 BEA07-174.00  View
340609 65275 CVE-2006-6731 http://docs.info.apple.com/article.html?artnum=307177  View
340610 65275 CVE-2006-6731 HPSBUX02196  View
340611 65275 CVE-2006-6731 APPLE-SA-2007-12-14  View
340612 65275 CVE-2006-6731 SUSE-SA:2007:003  View
340613 65275 CVE-2006-6731 oval:org.mitre.oval:def:10134  View
340614 65275 CVE-2006-6731 http://scary.beasts.org/security/CESA-2005-008.txt  View
340615 65275 CVE-2006-6731 GLSA-200701-15  View
340616 65275 CVE-2006-6731 GLSA-200702-08  View
340617 65275 CVE-2006-6731 1017425  View
340618 65275 CVE-2006-6731 102729  View
340619 65275 CVE-2006-6731 GLSA-200705-20  View
340620 65275 CVE-2006-6731 VU#149457  View
340621 65275 CVE-2006-6731 VU#939609  View
340622 65275 CVE-2006-6731 SUSE-SA:2007:010  View
340623 65275 CVE-2006-6731 RHSA-2007:0062  View
340624 65275 CVE-2006-6731 RHSA-2007:0072  View
340625 65275 CVE-2006-6731 RHSA-2007:0073  View
340626 65275 CVE-2006-6731 21675  View
340627 65275 CVE-2006-6731 TA07-022A  View
340628 65275 CVE-2006-6731 ADV-2006-5073  View
340629 65275 CVE-2006-6731 ADV-2007-0936  View
340630 65275 CVE-2006-6731 ADV-2007-1814  View
340631 65275 CVE-2006-6731 ADV-2007-4224  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58649 JVNDB-2006-000845 Sun Java Runtime Environment における複数のバッファオーバーフローの脆弱性 Sun Java Runtime Environment (JRE) には、Java_sun_awt_image_ImagingLib_convolveBI() 関数、awt_parseRaster() 関数および awt_parseColorModel() 関数に関連する整数オーバーフローの脆弱性が、ava_sun_awt_image_ImagingLib_lookupByteRaster() 関数においてスタックオーバーフローが発生する脆弱性が存在します。また、Java_sun_font_SunLayoutEngine_nativeLayout() (JRE) 関数において特定の負の値に対する扱いが不適切である脆弱性が存在します。 CVE-2006-6731 22833 CVE-2006-6731 65275 9.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000845.html 2006-12-19 2007-12-28 View